In this situation the Security Profiles on the SMS contain filters that are known but also filters that are unknown to the IPS. If a Security Profile is distributed to the IPS, the configuration of the known filters will be applied by the IPS. But the configuration of the unknown filters cannot be used.Before the Security Profile is distributed the SMS will inform you about the different DV-versions and will ask you if you want to proceed. If you confirm, after the distribution the SMS will inform you about the filters the IPS was unable to configure using a Notification Window that contains a message like this:
Wed Aug 06 14:37:48 GMT+01:00 2008:
InstructorIPS (10.31.1.94) System Log Notification (error): parseOnePolicy: Invalid policy [d0af8c30-63bc-11dd-3120-81fae65bd922]
Wed Aug 06 14:37:47 GMT+01:00 2008:
InstructorIPS (10.31.1.94) System Log Notification (error): isValid:Signature [00000001-0001-0001-0001-000000006273] does not exist for policy [d0af8c30-63bc-11dd-3120-81fae65bd922]
The [00000001-0001-0001-0001-000000006273] message in this example tells you the filter that was unknown to the IPS: 6273.
The Digital Vaccine on the IPS is newer then the DV on the SMS:
In this situation the Security Profiles on the SMS do not contain all filters the IPS knows about. Some filters on the IPS will not be configured by the SMS. The IPS will use the Category Settings for these filters.Before the Security Profile is distributed the SMS will inform you about the different DV-versions and will ask you if you want to proceed. If you confirm, after the distribution there is no warning on this situation anymore.
