Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

What Happens If SMS And IPS Have Different Active Versions Of The Digital Vaccine?

    • Updated:
    • 25 Aug 2017
    • Product/Version:
    • TippingPoint Digital Vaccine
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint NGFW All
    • TippingPoint SMS All
    • TippingPoint TPS
    • TippingPoint Virtual SMS
    • TippingPoint Virtual TPS All
    • Platform:
Summary
Different DV's deployed in SMS and IPS
Details
Public

In this situation the Security Profiles on the SMS contain filters that are known but also filters that are unknown to the IPS. If a Security Profile is distributed to the IPS, the configuration of the known filters will be applied by the IPS. But the configuration of the unknown filters cannot be used.Before the Security Profile is distributed the SMS will inform you about the different DV-versions and will ask you if you want to proceed. If you confirm, after the distribution the SMS will inform you about the filters the IPS was unable to configure using a Notification Window that contains a message like this:

Wed Aug 06 14:37:48 GMT+01:00 2008:
InstructorIPS (10.31.1.94) System Log Notification (error): parseOnePolicy: Invalid policy [d0af8c30-63bc-11dd-3120-81fae65bd922]

Wed Aug 06 14:37:47 GMT+01:00 2008:
InstructorIPS (10.31.1.94) System Log Notification (error): isValid:Signature [00000001-0001-0001-0001-000000006273] does not exist for policy [d0af8c30-63bc-11dd-3120-81fae65bd922]

The [00000001-0001-0001-0001-000000006273] message in this example tells you the filter that was unknown to the IPS: 6273.


The Digital Vaccine on the IPS is newer then the DV on the SMS:

In this situation the Security Profiles on the SMS do not contain all filters the IPS knows about. Some filters on the IPS will not be configured by the SMS. The IPS will use the Category Settings for these filters.Before the Security Profile is distributed the SMS will inform you about the different DV-versions and will ask you if you want to proceed. If you confirm, after the distribution there is no warning on this situation anymore.

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000085779
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.