01-06-2003 12:50 PM - edited 03-09-2019 01:35 AM
In S37 there are 2 signatures that do not allow for blocking. As a matter of fact they allow for no actions to be taken on the signature at all.
I am administring the appliance sensors via the web interface. Has anyone else experienced this issue or is it a "feature" of those particular signatures?
01-06-2003 01:47 PM
There is nothing that should be precluding you from blocking with these signatures. Are you getting an error message of some kind from IDM?
01-06-2003 02:55 PM
Negative. There are just 5 fields displayed when I go into edit that signature.
ID - 5343
Signature - Apache Host Header...
Severity - High (this field is editable)
Action - None
Comments - Apache Host ... (this field is editable)
This is a far cry from the usual fields I get when editing a signature. Should I open a TAC case?
01-07-2003 08:09 AM
If the Action field is set to None and is not editable, then either there
are no legal actions possible, or the legal actions were
accidentally left out. It looks like this might be the latter case.
Investigating...
01-07-2003 03:53 PM
We did indeed have a problem with the S37 signature update package. We will have an S38 package out by the end of this week (Friday), so we won't update S37. I'll post here with a location to the S38 files when they are available. We apologize for any incovenience.
01-07-2003 04:08 PM
Excellent. I appreciate your quick responses and await the new signature update with anticipation.
Ron Russell
Calence Inc
01-14-2003 10:59 AM
It's past the date you indicated, and there is still no S38. Do you have a new ETA?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide