Disable IP Audit Signature still generating alert on ASA
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-10-2009 12:20 AM - edited 03-11-2019 08:41 AM
Hi,
We have a pair of ASA 5540's in a failover configuration.
We have upgraded the primary active unit to v8.2(1) and have left the standby in 7.4(2). Although we get warning messages, failover works so I am leaving the standby unit on 7.4 for a week incase we experience any major issues with v8.2(1).
We are currently experiencing alot of false positive IP Audit alerts from sig 1103 (IP Teardrop). I have disabled this signature in the IP Audit settings within ASDM (v6.2(1)) yet the alert is still being generated.
I have tried removing the entire IP Audit policy and re-applying, yet the alert messages still get generated.
Has anyone else epxerienced this on v8.2 or have a solution for my problem ?
Thanks in advance.
Chris.
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-10-2009 01:50 AM
would suggest to updage both the firewalls to 8.0(4) version
