App owner complained of blocked traffic. I verified firewall rule was correct and traffic was allowed. I then searched Intrusion events and found that the traffic in question is being dropped by "NETBIOS DCERPC possible wmi remote process launch"
I'm new to Cisco IPS / FMC v6.2. What options do I have to resolve only this issue between the two specific servers without affecting anything else in IPS?
Thanks!
