TMS zl Management and Configuration Guide ST.1.1.100430

10-58
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
3. Locate the signature in the list and clear the Enable option.
4. Click Save.
You can also disable a signature from the CLI. Enter:
hostswitch(tms-module-C:config)# ips signatures
<Signature_Family> <Signature_ID> disable
Troubleshooting Problems with Downloading the IDS/IPS
Signatures
After you register your IDS/IPS signature subscription, you should be able to
download the latest signatures from the HP ProCurve Networking update
server. For step-by-step instructions on downloading these signatures, see
“Download Signatures” in Chapter 6: “Intrusion Detection and Prevention.”
If the TMS zl Module is unable to download the signatures correctly, use the
error message you receive to troubleshoot and resolve the problem. For
example, if you receive the error message, “Unable to resolve domain name,”
you should check the module’s DNS settings.
Depending on the error message you receive, you should check the following:
■ The IDS/IPS subscription license is still valid.
■ The appropriate access policy exists to allow the download:
• Direct connection—The access policy permits HTTPS from Self to
the zone associated with Internet access.
• Proxy connection—The access policy permits traffic using the proxy
port from Self to the zone that includes the proxy server.
■ DNS is configured correctly, so that the TMS zl Module can resolve
tmsupdate.procurve.com or the proxy server.
■ The appropriate access policy exists to allow DNS traffic between the
TMS zl Module (Self) and the DNS server’s zone.