This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AT&T Connect

Within the last week or so, I can no longer connect to my teleconferencing bridge AT&T Connect.

here is what I see in the IPS logs...

2015:03:25-15:09:48 ey-2 snort[12091]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="SERVER-OTHER SSL request for export grade ciphersuite attempt" group="500" srcip="122.248.145.10" dstip="10.2.62.12" proto="6" srcport="443" dstport="12116" sid="33777" class="Potential Corporate Privacy Violation" priority="1" generator="1" msgid="0"

My address is the 10 address and I should note that I am in the exceptions list.

I am not really sure what to make of it or where to start looking. I will also note that if I connect to a hot spot (verizon) it connects fine.

This thread was automatically locked due to age.

0 Scott_Klassen over 9 years ago

If you're comfortable with it and believe this to be a false positive, you can create a rule modification to disable 33777.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 James Shakour over 9 years ago

I am comfortable but I am wondering why it is only occurring at my local site and what triggered it.

I added the rule and the software works.

Thanks for the help Scott!
Cancel
Vote Up 0 Vote Down

Cancel