Upgrade DPI / Application Signature File on AP's: The selected application signature file is only compatible with signature DPI engine v5.

  • 1
  • Question
  • Updated 2 years ago
We currently have 166 devices. About 60 of these are BR100 routers for small remote offices, the rest are BR200, AP350, AP121 and AP230 devices in HMOL (HiveManager Enterprise 6.6r3a)

All of those (except for BR100 and CVG) devices have an App Signature File that needs to be updated. But what is the App Signature File exactly? What does it do?

Am I correct thinking that App Signature = Hardware firmware and HiveOS software version is the software running on this hardware?

3 of our devices is running v3, 80% is running 4.0.8 and some are running 5.0.

When I try to update a device running v3.0.0 to v5.0.0 I get the following error:
The selected application signature file is only compatible with signature DPI engine v5 on Aerohive devices.
Select a different file or load a HiveOS release with signature DPI engine v5 on the devices and try again.
The following devices cannot support the selected file



Okayy... I get that I would need to update the DPI then.. but what the heck is a DPI and how to I update this?
Photo of Tiele Declercq

Tiele Declercq

  • 28 Posts
  • 2 Reply Likes

Posted 2 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Tiele,
Do you have an on-premises version of HiveManager, or are you using our cloud servers? 

The Application Visibility and Control functions of our software use a file containing signatures (patterns of traffic) that can be used as fingerprints to identify specific applications. For example, outbound traffic from a wireless client towards some server on TCP port 25 that contains the string "HELO" in a certain place identifies an SMTP email connection request, and other patterns in that traffic can help identify a specific email client. A set of AVC signatures are embedded within HiveOS images, but they can be independently updated without updating HiveOS itself.

The DPI Engine is the component within HiveOS that knows how to parse the AVC signature file and to do the deep packet inspection on traffic to match signatures. This can only be updated by upgrading the HiveOS itself. 

HiveOS version 6.5r3 contains the DPI version 5 engine. Upgrade your HiveOS devices to this version and they'll have the v5 DPI engine.

Does this help at all?
Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
DPI and the applications signatures are what drive the data in those application usage widgets on the dashboard. Any reports on how much YouTube, Facebook, BitTorrent, etc traffic are being used on your network are delivered via each AP's DPI capabilities.

The application signatures are updates to the DPI detection capabilities - new rules to account for new application behaviors.  Periodically, we also upgraded the application inspection engine via a HiveOS upgrade, which means that certain HiveOS versions need to use certain revisions of the application signatures.

With APs running code prior to HiveOS 6.2r1 you will use 3.x application signatures, most HiveOS versions 6.r2r1 or higher use 4.x signatures (4.0.8 is the highest released), with one exception. APs running 6.5r3 (or 6.5r3a) use new 5.X signatures.

Typically, new application signatures are automatically loaded when you upgrade your AP to a new HiveOS version as we typically release a new application signature in step with new HiveOS, although we have occasionally released signature files independently.

The AP in your image above is running 6.1r6, so you would move to the highest 3.X signature available to you. I suspect you may already have the highest version available to you though.  6.1r6 is about 2 years old at this point and we are not releasing new signatures for that HiveOS version. If you want to get the latest application detection capabilities, you should upgrade to HiveOS 6.5r3a first.

Also, the BR100 and CVG do not do DPI, so there are no signatures needed for those platforms.
Photo of Tiele Declercq

Tiele Declercq

  • 28 Posts
  • 2 Reply Likes
Okay.. Then how do you explain this?



A HiveAP350 running HiveOS 6.6r2a Irvine.2309 but running v4.
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Tiele,
Timing. We released HiveOS version 6.6r2 in November 2015, and we released HiveOS 6.5r3a in February of this year.
Photo of Tiele Declercq

Tiele Declercq

  • 28 Posts
  • 2 Reply Likes
Ok, Thanks for the info!