Cisco Cisco IPS 4255 Sensor 릴리즈 노트
37
Release Notes for Cisco Intrusion Prevention System 7.0(6)E4
OL-25700-01
Caveats
•
CSCtg50681—Sensor Upgrade failure. "ExecUpgradeSoftware: <> already installed"
•
CSCti08564—IPS TCP normalizer reorders packets but sends them with OoO timestamps
•
CSCti33970—Atomic IP:Cannot write a regular expression for L4 when L4 is Other
•
CSCti49271—inline IPS4270 stops traffic after reset in redundant environment
•
CSCti57119—IPS packet capture creates multiple files that are not removable
•
CSCti68528—IPS: Sensor not rotating Anomaly Detection knowledge base past initial
•
CSCti69203—No alarming on IPv6 traffic in promiscuous mode
•
CSCti70744—IPS sensor unable to copy current-config
•
CSCti79423—IPS: IP Reputation Update Crashes SensorApp on IDSM-2
•
CSCtj19451—Reputation Filtering incorrectly triggering drops on IPv6 addresses
•
CSCtj31566—SSH TCP port forwarding is enabled
•
CSCtj51386—sensor out of storage space due to global-correlation log
•
CSCtj86988—mainApp hangs in AuthenticationMgr
•
CSCtl04402—failure in decode params during web server control transaction
•
CSCtn11478—IDS - ATOMIC.ARP engine creates phantom duplicate signatures upon edit
•
CSCtn56839—IPS interface can be configured as promisc and VLAN-pair at same time
•
CSCtn84402—SensorApp not processing packets when eventstore is locked during query
•
CSCto51204—authentication attemptLimit leaks file handles and hangs mainApp
•
CSCto77871—Sensor health status for missed packets is incorrect
•
CSCto97367—Incorrect behaviour while changing cisco password
•
CSCtq00491—Sensor health for signature updates is incorrect
•
CSCtq71035—Inline interface pair stops packet forwarding after rebooting
•
CSCtr55676—Global Correlation assigning negative score to some IPv6 addresses
•
CSCtr77960—sensor should warn when signature tuning enables a retired sig
•
CSCts13275—Functionality of attemptLimit seems broken
Relevant Unresolved Caveats
The following caveats are unresolved in the 7.0(6)E4 release:
•
CSCtq79118—Sensor health for signature updates uses incorrect timestamp
In the IDM and the IME the health details for signature updates shows a current timestamp based on
the installation date of the signature update. However, the health status is based on the release date
of the signature update rather than the installation update. To see the release date of the signature
update use the show version command on the IPS CLI.
the installation date of the signature update. However, the health status is based on the release date
of the signature update rather than the installation update. To see the release date of the signature
update use the show version command on the IPS CLI.
•
CSCts40232 SensorApp stops while customizing ip-logs
The SensorApp can stop when automatic iplogging and manual iplogging are being executed
simultaneously. The issue appears to be a race condition. Restart the sensor if you encounter this
condition.
simultaneously. The issue appears to be a race condition. Restart the sensor if you encounter this
condition.