Overview
While trying to update the IPS feature, Kerio Control shows the following entry in the error logs: IPS Error: hs_compile_multi() failed: Unsupported architecture (expression: -1) (1)
This issue is observed in Kerio Control 9.3.3 or later that is installed on CPU hardware released before 2006 (Virtual or Software Appliance).
9.3.3 and later versions rely on the HyperScan engine in SNORT (internal library for IPS) for increased performance. This error occurs when your CPU architecture does not meet the minimum requirements to support this feature.
At a minimum, the HyperScan engine requires Supplemental Streaming SIMD Extensions 3 (SSSE3).
Solution
Please try the solution that suits your environment or company needs:
- Upgrade the hardware (CPU) to a more up-to-date architecture/hardware family (CPU issued in 2006 or later).
- Disable 'processor compatibility' option from Virtual Machine settings (if available).
- Downgrade Kerio Control to older versions (9.3.2 and earlier) by manually uploading a binary file.