03-09-2004 12:43 PM - edited 03-09-2019 06:41 AM
'lo all.
It seems in the last 2 days or so, one of our filters is seemingly being ignored. I double checked on the sensor itself, and the filter is still in tact and looks the same as ever, however now our event viewer is getting filled up with the traffic that it used to pear out. Has anyone else had this problem? Any thoughts as to why this would happen? The only changes we've made recently have been sig updates, but nothing we've done has seemed to coincide with when the problem started.
03-10-2004 05:27 AM
I have more than one filter being ignored. I've only updated sigs as well. I think my problem started at S70. Re-applying them from IDSMC doesn't seem to help either.
Anyone else?
03-11-2004 08:13 AM
I'm seeing this as well. I've just disabled the alarm(s) for now as I don't really have time to mess with it.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide