Submit a ticketCall us

WebinarUpcoming Webinar: Know What’s Changed – with NEW Server Configuration Monitor

Change management in IT is critical. But, even with a good change management process, changes are too often not correctly tracked, if at all. The configuration of your servers and applications is a key factor in their performance, availability, and security. Many incidents can be tracked back to an authorized (and sometimes unauthorized) configuration change, whether to a system file, configuration file, or Windows® Registry entry. Join SolarWinds VP of product management Brandon Shopp to discover how the new SolarWinds® Server Configuration Monitor is designed to help you.

Register now.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > Cisco IPS devices not logging data when using the LEM agent

Cisco IPS devices not logging data when using the LEM agent

Updated March 28, 2017 


Cisco IPS devices are not logging data when using the LEM agent. Instead, you will see many Connection Timeout events coming into the LEM console from the Cisco IPS 5+ (SDEE) connector or Tool Alias.


All LEM versions


Workaround for LEM 6.1 agents


  1. Install the LEM agent.
  2. Go to the following locations: 
    • For 32-bit: C:\Windows\System32\ContegoSPOP\
    • For 64-bit: C:\Windows\SysWOW64\ContegoSPOP\
  3. Open the SWLEMAgent.lax file.
  4. Add the value -Dhttps.protocols=SSLv2Hello,TLSv1,SSLv3 to the property, so that the SWLEMAgent.lax file now looks like the following:
  5. Save the modified file.
  6. Restart the agent.

LEM pre-6.1 agents

SolarWinds recommends that you upgrade LEM agents earlier than version 6.0.


Last modified