Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guys,Is there a way that I can make a custom signature to detect if any given host has reached a predefined limit of sessions to specific host. I know this can be done with ASA, but can it be done with IPS functionality?
Hi,We have experiancing high cpu usage on windows 2003 sp1, when somebody logs in remotely. The server has 1gb of ram and the cpu is 2ghz. The Cisco Trust Agent (1.0.55) is installed also.When somebody logs in remotely the process okclient goes to 10...
Does anybody know why ips signatures fire on ntlm authentication proxy? In our environment we have ISA 2004 and the ips is complaining about http not in rfc specs and http not recognized. Is it possible that ips does not understand ntlm proxy authent...
Hi,Has someone been able to make an IPS signature for the new PDF XSS?I have tried something on the http service engine, but I'm having troubles specifying the # symbol as well as the multiple characters that may be anything.
Thank you Richard!Great response. I have similar problem. The difference is that this actually never happens - the .Net application tries to write to that default location, but it does not succeeds, because of security restrictions, but the event is ...
I had the same issue. Just disabled the new signature and wait for better days. as of the new signature sets 341 I see 3 new signatures already disabled. I guess with the next update these new that give us headache will be tuned also
You have auto update feature in Cisco IPS version 6.0, take a look at the attached picture.When updating signatures it is *recommended* that you reload the signatures (reboot the sensor), although this is not mandatory.Our IPS hasn't been rebooted fo...
