Knowledge Search


×
 

[ScreenOS] Why does the 'IDP policy update to ISG-IDP' display the 'IDP Profiling for will be disabled' message on the NSM GUI?

  [KB25468] Show Article Properties


Summary:
This article describes the issue of the IDP Profiling for <ISG-IDP device> will be disabled message being displayed in the NSM GUI, even when the IDP policy update is successful.

 
Symptoms:
The IDP Profiling for <ISG-IDP device> will be disabled message is displayed in the NSM GUI, even when the IDP policy update is successful. This is applicable to ISG-IDP devices.
 
Solution:
This message is displayed, if the IDP policy push is performed without configuring the profiler settings. To configure the profiler settings, perform the following procedure:
 
  1. From the Device Manager, double-click a device and then click Profiler Settings. In the General tab, check the Enable Profiling and Enable Application Profiling options.

  2. Configure the Profiler tracked host and excluded host settings to verify the network segments, on which the profiler gathers data.

  3. Configure the Profiler context settings to verify if the profiler logs include the data that is pulled from application contexts. Click the Contexts to Profile tab. Browse and select from the pre-defined list of contexts.

  4. After the required configurations are made, the profiler can be started by right-clicking the device in NSM and selecting IDP Profiler > Start profiler.

A second method to start the Profiler is to perform Update Device from the NSM. If the above stated configurations are done, the profiler process will start during the update.
Modification History:
2019-09-27: Minor, non-technical edits.
Related Links: