Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
As of Wednesday, our SSM IPS system starting picking up a large amount of hits against rules 3327/8, 5799/6, and 6131/6 (sig set 364). These rules are related to the MS Server Serivce, MS RPC, and UPnP services. All of these came from our VPN users i...
The 364 sig update was applied on Monday soon after it was posted, so we went about a day and a half or so without seeing anything. We have not changed the state of these signatures beyond the default which they ship. MARS is rating each of these ale...
