cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2200
Views
0
Helpful
0
Replies

How to resolve false positive - legitimate traffic being blocked?

david
Level 1
Level 1

App owner complained of blocked traffic. I verified firewall rule was correct and traffic was allowed.  I then searched Intrusion events and found that the traffic in question is being dropped by "NETBIOS DCERPC possible wmi remote process launch" 

 

I'm new to Cisco IPS / FMC v6.2.  What options do I have to resolve only this issue between the two specific servers without affecting anything else in IPS?

 

Thanks!

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: