Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Wanted to post some experiences from this week dealing with CVE-2026-76461 in case it helps anybody here. This is a timeline of my experience with some technical IOC's for those who may want to go huntingFor background, my org has two clustered Ironp...
Looks like AsyncOS 16.0.4 build 016 was released - which should address CVE-2025-20393 ?
Skimming the release notes, I don't see "CVE-2025-20393" mentioned, nor CSCws52505, nor CSCws36549 in the linked "issues resolved links" but I'm assuming this r...
Hello all,
Currently building replacement fresh ironports in response to CVE-2025-20393
The new VM I've deployed - phoebe-16-0-1-017-C300V - is EXTREMELY slow on boot. This is the first 2h the thing has been online and I can't even use the GUI becau...
Hello, quick question about Cisco ThreatGrid/Secure Malware Analytics & ESAs - I just want to make sure I'm not missing something obvious here:
1) We recently re-licensed some Cisco ESA's - 2 x C300V's
2) When we did this, we received an email fro...
Hello, odd problem here. I have to C300V virtual ironports clustered, we'll call them ironport1 and ironport2
These ironports share a number of dictionaries and a number of filters that refer to those dictionaries.
LIST'ing the filters on Ironport2, ...
posting a follow up here - it was DNS, or rather, a networking issue that prevented DNS from getting out and querying nameservers
once this was fixed, the slowness/GUI failing stopped and the VM responded normally
leaving this here in case it helps...
Hm. Confirming that when I am logged in as device-admin, I see nothing other than files that have been submitted - but apparently not analyzed? And this is by design? See attached
Yes, and yes.Sophos Anti-Virus Engine17 Jun 2014 19:25 (GMT +00:00)3.2.07.351.0_5.01Not AvailableSophos IDE Rules18 Jun 2014 13:14 (GMT +00:00)2014061807Not Available Threats in question:https://www.virustotal.com/en/file/1ec8a4d209c1c46c8cda124e0035...
Followup to save someone else time: An update from 02/19/2014 apparently broke some SBRS engines. Logged into ironnport, ran: repengupdate forceWaited 4 mins for it to kick in. SBRS began functioning normally again. Hope this helps someone else and s...
