Hi Does anybody else noticed this warning started this weekend on their devices ? XXX : Security Intelligence URL: memcap exceeded (loaded 2167178 of 2939377)This started showing up since this saturday, with no change to any policy/configuratio...
Issue seems to be fixed now. After feeds went over 4 million, it started decreasing significantly and now this error is not seen anymore. Based on latest TAC update - this was not a planned activity (lol :D), and there is a announcemtn from Talos exp...
I am really leaning toward saying that something went wrong with feeds and is causing this problem. You can check feeds on your own:find /var/sf/siurl_download/. -name '*' | xargs wc -l - this commands shows which feeds consumes most entries. That al...
I get this info from TAC engineer, while working on case. I have asked for official documentation on this change, so far we didn't get it. At the same time, I am leaning toward interpretation from Stephen Hess more - automated feeds have gone rough o...
So based on our Cisco TAC update, this is the reason:"TALOS team performed a large update to the Security Intelligence feeds and made them significantly larger." Solutions proposed so far are:1. Lower number of feeds in SI 2. Disable URL filtering if...
I am asking mainly to check if anybody is seeing this error since last few days or it's just us ? I am aware of this article and older bugs, and have some thought that maybe this time it is also issue with SI feeds that hotfix from Cisco will resolve...
