IBM Support

Inbound SSL analysis of SSLv2 traffic might cause inspection engine crashes on QRadar Network Security sensors

Troubleshooting


Problem

Inspection of SSLv2 traffic with the QRadar Network Security (XGS) Inbound SSL feature can cause the alpsd process which handles inspection to crash in firmware 5.4.

Cause

A defect was identified in a library used for the inspection process.

Resolving The Problem

This issue is fixed in firmware version 5.4.0.2. You should upgrade to this version or higher to apply the fix.

If you are unable to update to the version listed above, the following fixpacks are available for earlier versions:




[{"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"SSL Inspection","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.4","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22004900