Recently configured IOS IDS on a 3620 and now clients cannot connect using windows remote desktop. I tried disabling a few of the signatures with no luck. Any ideas?
Check the log on the router it should be reporting any actions via IDS or IPS. Also, you should implement IDS or IPS without the reject option until you verify there are no false positives, just log signatures for a while.
I removed the ip audit attack command completely and I still get the same problem. No syslog message or console message is being generated either. I know IDS is working because of other messages being logged.
No I haven't. I tried disabling some various signatures but didn't have any luck. I actually haven't looked at the issue in awhile. If you get anywhere, please let me know.
