I ran into a frustrating issue today - unable to access certain files while using the 8.965-7 beta. I was trying to open the PDF file at the link below and even after trying from different computers, I still could not get the PDF to open up when accessed through Beta v8.965-7.
Since I'm running ASG on top of VMWare, I figured I'd fire up v8.304 and see if the firewall was the issue and sure enough, the link below worked just fine running through ASG v8.304.
Both firewalls are configured exactly the same and are only using the "Firewall" (packet filters) and IPS. Since this is just a home environment on an Atom machine, I don't use any of the web filtering or proxy features.
http://www.3mwater.com/media/catalog...DWS1000PDS.pdf
The IPS log on Beta v8.965-7 showed the following entry:
2012:06:03-18:48:28 Astro snort[9272]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-PDF Adobe PDF start-of-file alternate header obfuscation" group="340" srcip="184.106.56.170" dstip="xx.xx.xx.xx" proto="6" srcport="80" dstport="51006" sid="16354" class="Misc activity" priority="3" generator="1" msgid="0"
Since I'm running ASG on top of VMWare, I figured I'd fire up v8.304 and see if the firewall was the issue and sure enough, the link below worked just fine running through ASG v8.304.
Both firewalls are configured exactly the same and are only using the "Firewall" (packet filters) and IPS. Since this is just a home environment on an Atom machine, I don't use any of the web filtering or proxy features.
http://www.3mwater.com/media/catalog...DWS1000PDS.pdf
The IPS log on Beta v8.965-7 showed the following entry:
2012:06:03-18:48:28 Astro snort[9272]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-PDF Adobe PDF start-of-file alternate header obfuscation" group="340" srcip="184.106.56.170" dstip="xx.xx.xx.xx" proto="6" srcport="80" dstport="51006" sid="16354" class="Misc activity" priority="3" generator="1" msgid="0"