Cisco Cisco IPS 4520 Sensor 릴리즈 노트

Release Notes for Cisco Intrusion Prevention System 7.1(6)E4

OL-27710-01

Restrictions and Limitations

•

CSM 4.2 SP1 cannot currently manage the following devices running IPS 7.1(6)E4:

–

IPS 4240

–

IPS 4255

–

IPS 4260

–

IPS 4345

–

IPS 4345-DC

–

IPS 4510

–

IPS 4520

–

ASA 5500 AIP SSM-10

–

ASA 5500 AIP SSM-20

–

ASA 5500 AIP SSM-40

–

ASA 5512-X IPS SSP

–

ASA 5515-X IPS SSP

–

ASA 5525-X IPS SSP

–

ASA 5545-X IPS SSP

–

ASA 5555-X IPS SSP.

Note

Support for these platforms is available in CSM 4.3 SP1.

•

CSM 4.3 cannot currently manage the following devices running IPS 7.1(6)E4:

–

IPS 4240

–

IPS 4255

–

IPS 4260

–

ASA 5500 AIP SSM-10

–

ASA 5500 AIP SSM-20

–

ASA 5500 AIP SSM-40

Note

Support for these platforms is available n CSM 4.3 SP1.

•

In IPS 7.1, rx/tx flow control is disabled on the IPS 4200 series sensors. This is a change from IPS
7.0 where rx/tx flow control is enabled by default.

•

Enabling HTTP advanced decoding can have a significantly negative performance and memory
impact on the sensor.

•

Use the show statistics virtual-sensor | include load command (CLI) or look at the statistics for
the virtual sensor at Configuration > Sensor Monitoring > Support Information > Statistics
(IDM/IME) to determine the load value over a longer period of time. The show statistics
analysis-engine command (CLI) and the statistics for Analysis Engine show values over a shorter
period of time. If you compare the output, the values will appear to be inconsistent due to the
different time periods. To get an accurate comparison between them, compare the processing load
percentage from the statistics for the virtual sensor and the one-minute averaged value from the
statistics for Analysis Engine.