This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS on all UTMs exiting?

Group, please check your UTMs snort logs. Could it be for some reason (maybe faulty pattern) snort stopped at around 07:20pm CET on all UTMs? Or would this be just an instance and the others might still run?

This thread was automatically locked due to age.

0 JoergRiether over 3 years ago

I checked it, snort is indeed running but i find it strange that at around this very timeframe all utms would exit some ids instance.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 3 years ago

I didn't see anything on 18 Jan, Jörg, but I do see that Snort restarted in our UTM at 7:18 PM CET on 19 Jan immediately after the Up2Date log shows that ipsbundle2-9.381 was installed.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 JoergRiether over 3 years ago in reply to BAlfson

Thanks Bob.

I have never before dealt intensively with it and researched.
I will keep an eye on it. It's interesting in any case.

Cheers - Jörg
Cancel
Vote Up 0 Vote Down

Cancel