UTM Firewall

Network Protection: Firewall, NAT, QoS, & IPS IPS Snort update SID 23115 false positives

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 2 replies
Subscribers 2 subscribers
Views 8334 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS Snort update SID 23115 false positives

claytonkramer over 12 years ago

My site just encountered a problem with IPS Snort update SID 23115 false positives. Our Astaro started dropping legitimate MySQL connections. Anyone experiencing this as well?

This thread was automatically locked due to age.

0 BarryG over 12 years ago

Hi, I haven't seen it (yet).

Anyways, you can disable that rule (or set it to Alert instead of Drop), by adding the SID to the exception list in Webadmin -> Network Security -> IPS -> Advanced.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 claytonkramer over 12 years ago in reply to BarryG

Yeah. Did that after we got our web sites running again and caught our breath. [:)]
Cancel
Vote Up 0 Vote Down

Cancel