About PronetMSSP

PronetMSSP · 01-22-2011

Is anyone else seeing a lot of alerts firing from legit sites for sig 31359/1? I'm receiving them from Yahoo and Akamai as well as a few other sites.Cory

PronetMSSP · 01-01-2011

Has anyone come across a fix or update that will allow you to filter CiscoWorks SecMon events using the year 2011?Currently the last date you can use is December 31, 2010 which is fine for now but we typically set the dates to view unresolved alerts ...

PronetMSSP · 11-04-2010

Has anyone else ran into an issue with sig 31020 alerting to false positives?

PronetMSSP · 01-27-2011

I have been out of the office all week and just wanted to say thank you for posting the packet capture.Cory

PronetMSSP · 01-08-2011

Scott,Thank you for the reply.That's no good. It would have been nice if they would have added a 2011 year before ending support.Cory

PronetMSSP · 12-09-2010

Martin,Thank you very much. I imagine option A will work just fine but I'll have to look into these and see which option will be better for us. This will mainly be used to block malware from downloading executables but will also help stop the occasi...

PronetMSSP · 12-09-2010

Thank you for the quick reply and for the information. I'll start digging further into it and create a test signature.Thanks again,Cory

PronetMSSP · 12-09-2010

Did you find an answer to this question? We are looking to do the same thing here and I'm just starting to research it. Thank you,

Member Since	‎07-21-2010 10:11 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	11

User Statistics

User Activity

Activity on Signature 31359/1

SecMon doesn't show an option to change the Event Start/Stop time to 2011

Signature 31020 appears to be alerting to a massive amount of false positives

Re: Activity on Signature 31359/1

Re: SecMon doesn't show an option to change the Event Start/Stop

Re: can ips be used to block *.exe downloads

Re: can ips be used to block *.exe downloads

Re: can ips be used to block *.exe downloads