topic Trend CSC SSM file blocking issue in Network Security

Trend CSC SSM file blocking issue

bus1nesssa — Mon, 11 Mar 2019 18:41:05 GMT

Attempting to use the File Blocking function under Web (HTTP) | File Blocking to block .scr files.

Added 'scr' into Block specified file extensions, and enabled this option .. and the system started to block anything from main.aspx files to google search result pages.

(we had notifications turned on and were swamped with messages within seconds)

Any ideas ?

Re: Trend CSC SSM file blocking issue

abinjola — Thu, 16 Sep 2010 06:45:34 GMT

which version of CSC are you running ?

you may want to have a look at : CSCtb9002 CSC: File Blocking - Executables also blocks some CSS and SWF files

--regards

Re: Trend CSC SSM file blocking issue

bus1nesssa — Fri, 17 Sep 2010 01:02:01 GMT

Sorry, forgot to put that in.

v 6.3.1172.0

Unfortunately I can't get to that link and can't find a reference to it on the Cisco site.

Re: Trend CSC SSM file blocking issue

abinjola — Fri, 17 Sep 2010 02:42:59 GMT

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&b
ugId=CSCtb90028

Please upgrade to the latest and let me know

Re: Trend CSC SSM file blocking issue

bus1nesssa — Fri, 17 Sep 2010 04:45:45 GMT

Thanks,

May have jumped the gun posting this one as release 6.3.1172.3 may have resolved the issue :

New features in 6.3.1172.3:

   Issue: Users may not be detected on a PC with multiple IP addresses.
   Affects: 6.3.1172.0-6.3.1172.2
   Change: Allowed the client workstation to be queried directly when the log-parsing approach does not work.

Bug-fixes in 6.3.1172.3:

   Issue: The Active Directory agent is unable to query usernames from the Domain Controller.
   Affects: 6.3.1172.0-6.3.1172.2
   Change: Enhanced the Global Catalog (GC) discovery mechanism to bind to the correct GC.

Issue: Sometimes the Domain Controller Agent cannot find the username/group by IP address.
Affects: 6.3.1172.0-6.3.1172.2
Change: Allowed the client workstation to be queried directly when the log-parsing approach does not work.

Will apply it this weekend and check it out.