Can someone test loading SOPHOS.com and see if you get Numerous IPS Triggered and end up unable to load the page?
I simply need to disable IPS and everything works.
I am Not keen to Disable IPS / This Signature Blindly as it seems to lower my protection against a real attack.
Hope SOPHOS either fix something on their website / fix this IPS Signature.
I tried to see Exception to see if I can add *.sophos.com but I can't, I need to add the Network and I dont know all the SOPHOS web-servers especially when it is behind Akamai.
Message........: WEB-CLIENT Microsoft Internet Explorer colgroup tag uninitialized memory exploit attempt
Details........: Snort ::
Time...........: 2012-07-24 00:50:54
Packet dropped.: yes
Priority.......: high
Classification.: Attempted User Privilege Gain IP protocol....: 6 (TCP)
Source IP address: 125.252.225.152 (a125-252-225-152.deploy.akamaitechnologies.com)
I simply need to disable IPS and everything works.
I am Not keen to Disable IPS / This Signature Blindly as it seems to lower my protection against a real attack.
Hope SOPHOS either fix something on their website / fix this IPS Signature.
I tried to see Exception to see if I can add *.sophos.com but I can't, I need to add the Network and I dont know all the SOPHOS web-servers especially when it is behind Akamai.
Message........: WEB-CLIENT Microsoft Internet Explorer colgroup tag uninitialized memory exploit attempt
Details........: Snort ::
Time...........: 2012-07-24 00:50:54
Packet dropped.: yes
Priority.......: high
Classification.: Attempted User Privilege Gain IP protocol....: 6 (TCP)
Source IP address: 125.252.225.152 (a125-252-225-152.deploy.akamaitechnologies.com)