5403-0 - Skype

[murphy.brandon]

I have noticed this signature ( 5403-0) has been firing off more often in our environment.  i've noticed some of the of the destination IP addresses are actually own by Skype, I haven't had any time to investigate fully, but thought i'd see if anyone has seen this.

[androdri]

Hello Brandon

Signature 5403-0 is firing with Skype keepalive  Traffic.   The signature is being modified  to minimize its firing with  Skype traffic.

[murphy.brandon]

any idea when this one will come out?

[mzeiser]

Hi Brandon

The updated signature will be released with one of the very next builds. Is that timeframe ok?

Martin

IPS Signature Team