Error checking Updates - IDS Policy Manager v1.x

Forum Other Forums IDS Policy Mana... Error checking Updates

1/15/2007 5:41 PM

	Hekien
3 posts

Error checking Updates

Hello all!

I am having a bit of a troiuble of updating my Policy Manager. The version that I have is 1.8.1.Build 66. The policies that I am trying to update are either 2.0 or 2.4.3 policies. When I open them in PM, I get in the lower left hand corner "Error checking for Updates." Has anybody seen anything like this before? Thanks!

If you have and their is no solution, what is the work around then if there is one?

1/15/2007 6:19 PM

	Jeff Dell
219 posts
www.activeworx.com

Re: Error checking Updates

This could be one of 2 things...

There is a problem with IDSPM v1.x and the way it performs fast checking for updates. This is due to our web server changes.. in short, if you turn off this option in the settings form you won't get this error anymore. A fix.. update to v2.x. :)

a major issue with v1.x is that it doesn't cache the rules when it downloads updated rules from snort.org. In the last few months Sourcefire has prevented you from downloading rules more often then every 15 minutes... so if you are trying to update more then 1 sensor in 15 minutes you are going to get an error. A fix for this... update to v2.x. Rules are now cached to prevent this from being an issue.

Cheers,
Jeff

1/15/2007 8:24 PM

	Hekien
3 posts

Re: Error checking Updates

I'm in the process of updating my IDSPM but I noticed that the snort versions are only 2.4 and 2.6. I have snort 2.0 still. Do you know if that will affect my 2.0 policies when I try to update them? Thanks!

1/16/2007 11:21 AM

	Jeff Dell
219 posts
www.activeworx.com

Re: Error checking Updates

You should be fine.. if anything you will want to make sure you only use pre-processors that are supported under v2.0. Test your snort config to make sure everything works and you should be set.

As for Rules... You can add Snort v2.0 if you like. just make sure it points to the correct url. To do this go to the settings form and you can easily just copy one of the existing locations and use Snort v2.0 instead of what is there.

Cheers,
Jeff

1/16/2007 3:51 PM

	Hekien
3 posts

Re: Error checking Updates

Thanks!

I am trying to update the policies but I always get a "server refused connection error." Do you know if it is Activeworx or Snort causing this problem. Thanks!

1/17/2007 12:05 PM

	Jeff Dell
219 posts
www.activeworx.com

Re: Error checking Updates

In the Policy Manager goto settings/version info and copy the contents from the location and paste it into a webbrowser. do you get an error now? if so, it is a snort.org issue.

Cheers,
Jeff

Page 1 of 1

Forum

Other Forums

IDS Policy Mana...

Error checking Updates