C-24
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the Appliance
• You can configure a maximum of two external product devices.
For More Information
• For more information on working with OS maps and identifications, see Adding, Editing, Deleting,
and Moving Configured OS Maps, page 7-28 and Displaying and Clearing OS Identifications,
page 7-32.
• For the procedure for adding trusted hosts, see Adding TLS Trusted Hosts, page 4-51.
External Product Interfaces Troubleshooting Tips
To troubleshoot external product interfaces, check the following:
• Make sure the interface is active by checking the output from the show statistics
external-product-interface command in the CLI, or choose Monitoring > Sensor Monitoring >
Support Information > Statistics in the IDM and check the Interface state line in the response, or
choose Configuration > sensor_name > Sensor Monitoring > Support Information > Statistics
in the IME, and check the Interface state line in the response.
• Make sure you have added the CSA MC IP address to the trusted hosts. If you forgot to add it, add
it, wait a few minutes and then check again.
• Confirm subscription login information by opening and closing a subscription on the CSA MC using
the browser.
• Check the Event Store for the CSA MC subscription errors.
For More Information
• For the procedure for adding trusted hosts, see Adding TLS Trusted Hosts, page 4-51.
• For the procedure for displaying events, see Displaying Events, page C-108.
Troubleshooting the Appliance
This section contains information to troubleshoot the appliance. It contains the following topics:
• The Appliance and Jumbo Packet Frame Size, page C-25
• Troubleshooting Loose Connections, page C-25
• The Analysis Engine is Busy, page C-25
• Connecting the IPS 4240 to a Cisco 7200 Series Router, page C-26
• Communication Problems, page C-26
• The SensorApp and Alerting, page C-31
• Blocking, page C-38
• Logging, page C-47
• TCP Reset Not Occurring for a Signature, page C-52
• Software Upgrades, page C-54