IPS signature warnings streaming Amazon Prime Video

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 22:35:44 GMT

Hi Emmanuel,

thanks a lot for That hint. Today no issues while streaming...
besides this i would highly prefer to not block the signature for any traffic but for traffic from Amazon Video...

RE: IPS signature warnings streaming Amazon Prime Video

emmosophos — Fri, 29 Jan 2021 19:20:29 GMT

Hello njabi,

Thank you for the follow-up!

Try then adding an exception for that Signature ID.

https://support.sophos.com/support/s/article/KB-000038369?language=en_US

Regards,

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 12:23:53 GMT

Hi Ian,

this option is unchecked on my XG.
Without beeing offensive: Is this setting even applying to IPS?

RE: IPS signature warnings streaming Amazon Prime Video

rfcat_vk — Fri, 29 Jan 2021 11:11:22 GMT

Hi,

there is another thread with a similar issue a little while ago.

Ian

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 10:05:42 GMT

not sure about it, can you post a screenshot pls?

RE: IPS signature warnings streaming Amazon Prime Video

rfcat_vk — Fri, 29 Jan 2021 10:02:00 GMT

No, there some fields in the web policy tab to disable scanning of audio and video. If you can’t find let me know and I will past a screenshot.

ian

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 08:38:16 GMT

my bad - don't you mean to bypass it in IPS policies?
I don't see a chance bypassing audio/video in IPS...

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 08:20:39 GMT

Hi ian

thanks for your advice - I will give it a try. Does it also affect IPS module?

RE: IPS signature warnings streaming Amazon Prime Video

rfcat_vk — Fri, 29 Jan 2021 08:12:28 GMT

Hi,

do you have bypass scanning for video and audio enabled?
ian

RE: IPS signature warnings streaming Amazon Prime Video

njabi — Fri, 29 Jan 2021 08:08:24 GMT

Good day,

I don't use Winamp in my network. The traffic seen in the above screenshot comes from my AppleTV and it occures definitly while streaming Amazon Prime Video! The video stops streaming in this moment and I am getting bombed by tons of mails from my Appliance :-)

RE: IPS signature warnings streaming Amazon Prime Video

emmosophos — Wed, 27 Jan 2021 23:54:39 GMT

Hello nnjabi,

Thank you for contacting the Sophos Community!

As per the screenshot, these IPS signatures doesn't seem related to Amazon Prime but rather to a Software that might be in your network called Winamp, they recommend to patch your software with the latest update http://forums.winamp.com/showthread.php?t=332010

Regards,