Cisco Systems IPS4520K9 Network Router User Manual


 
E-21
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the Appliance
You can configure a maximum of two external product devices.
For More Information
For more information on working with OS maps and identifications, refer to Adding, Editing,
Deleting, and Moving Configured OS Maps and Adding, Editing, Deleting, and Moving Configured
OS Maps.
For the procedure for adding trusted hosts, refer to Adding TLS Trusted Hosts.
External Product Interfaces Troubleshooting Tips
To troubleshoot external product interfaces, check the following:
Make sure the interface is active by checking the output from the show statistics
external-product-interface command in the CLI, or choose .
Make sure you have added the CSA MC IP address to the trusted hosts. If you forgot to add it, add
it, wait a few minutes and then check again.
Confirm subscription login information by opening and closing a subscription on the CSA MC using
the browser.
Check the Event Store for the CSA MC subscription errors.
For More Information
For the procedure for adding trusted hosts, refer to Adding TLS Trusted Hosts.
For the procedure for displaying events, refer to Displaying Events.
Troubleshooting the Appliance
This section contains information to troubleshoot the appliance. It contains the following topics:
The Appliance and Jumbo Packet Frame Size, page E-22
Hardware Bypass and Link Changes and Drops, page E-22
Troubleshooting Loose Connections, page E-22
Analysis Engine is Busy, page E-23
Communication Problems, page E-23
Communication Problems, page E-23
The SensorApp and Alerting, page E-28
Blocking, page E-35
Logging, page E-44
TCP Reset Not Occurring for a Signature, page E-50
Software Upgrades, page E-51
Tip
Before troubleshooting the appliance, check the Caveats section of the Readme for the software
version you have installed on your sensor to see if you are dealing with a known issue.