Cisco IPS 4200 Series Sensors

Revised November 16, 2006

May 16, 2005

NOTICE:

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Products Affected

Problem Description

PIX Device Manager (PDM) versions 3.0(1) , 3.0(2), 4.0(1), and 4.1(1), and IDS Device Manager (IDM) version 5.0(1), are incompatible with Java Plug-in versions 1.4.2_08 and 1.5.0_02 or later. If these Java Plug-ins are used in conjunction with the impacted PDM or IDM releases, the application will not load.

Background

Changes made in the Java Plug-in 1.4.2_08 and 1.5.0_02 break the existing code loading functionality in PDM and IDM.

Problem Symptoms

Impacted PDM and IDM versions will not load when launched from a browser using Java Plug-in 1.4.2_08 or 1.5.0_02 or later. If you bring up the Java console, there will be a java.security.AccessControlException error:

Requesting URL: 
https://my.firewall.name/jploader.jar 
java.security.AccessControlException: access denied (java.util.PropertyPermission 
java.version read) 
at java.security.AccessControlContext.checkPermission(Unknown Source) 
at java.security.AccessController.checkPermission(Unknown Source) 
at java.lang.SecurityManager.checkPermission(Unknown Source) 
at java.lang.SecurityManager.checkPropertyAccess(Unknown Source) 
at java.lang.System.getProperty(Unknown Source) 
at com.cisco.pdm.e.c.q(Unknown Source) 
at com.cisco.pdm.e.c.h(Unknown Source) 
at com.cisco.pdm.a.byte(Unknown Source) 
at com.cisco.pdm.PDMApplet.start(Unknown Source) 
at com.cisco.nm.util.sgz.Env.start(Env.java:37) 
at com.cisco.nm.util.sgz.Loader.start(Loader.java:109) 
at sun.applet.AppletPanel.run(Unknown Source) 
at java.lang.Thread.run(Unknown Source)

Workaround/Solution

The latest maintenance releases PDM 3.0(3) and later, PDM 4.1(2) and later, and IDM 5.0(2) and later resolve this issue.

Version 3.x PDM software can be found at the Cisco PIX Security Appliance Software Download (registered customers only) page.

Version 4.x PDM software which manages FWSM version 2.x can be found at the Cisco Catalyst 6000 FireWall Service Module 3DES Software (registered customers only) page.

IDS sensor images with built-in IDM can be found at the following links:

Appliances (registered customers only)

ASA-AIP-SSM (registered customers only)

NM-CIDS (registered customers only)

IDSM2 (registered customers only)

Impacted Software Versions

PDM versions 3.0(1), 3.0(2), 4.0(1), 4.1(1), and IDM version 5.0(1) are impacted by this issue and will not load properly when used in conjunction with Java Plug-In versions 1.4.2_08 and 1.5.0_02 or later. Customers running these versions of PDM or IDM should either uninstall the newer Java Plug-Ins and re-install previous versions of the Java Plug-In, or upgrade their PDM and IDM images to the versions indicated in the following table.

PDM versions 1.0 through 2.1 only support the native Internet Explorer and Netscape Java virtual machines and do not support the Java Plug-In. Customers using these versions of PDM should refer to the appropriate release notes to find supported browser versions.

IDM versions 3.1 through 4.1 do not utilize Java and are purely HTML-based. They are not affected by this issue.

Adaptive Security Device Manager (ASDM) versions 5.0(1) and later are not impacted by this issue and operate normally when used in conjunction with the Java Plug-In versions 1.4.2_08 and 1.5.0_02.

DDTS

To follow the bug ID link below and see detailed bug information, you must be a registered user and you must be logged in.

Revision History

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email
• By telephone

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.