Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Following are symptoms:Starts with errorMessage: name=errWarning ARP: bad operation from packet ###Shortly after this we see events such Frag Too Small (1206)And following this the following message appears repeatedlyerrorMessage: name=errWarning Pro...
I run SecMon 1.2 to view syslog events generated by my PIXs. Lately I have received an error 'Licence for IDS MC expiredPlease update the licence'I have the VMS bundle 2.2 and do not have any problems with the Firewall MC. I am not running any IDSs, ...
I need more information on the following CSA event detail arguments and their possible values. These are obtained when you click 'Details' on an event that populates the CSAMC - Monitor> Event Monitor: Code PInt PString FileOp FilePrivateOp FilePriv...
Does anyone have any suggestions for a custom detection signature to capture ACK scans within the IDS code base-4 image, so that only those packets with a nibble set on ACK would trigger the detection signature.
Thanks a lot for the prompt reply. I only have two final questions:q.1 When pushing detection signature configurations changes to the sensors using MC, the changes are finalized following 5+minutes of high overhead for each push. After which the chan...