I am getting the following in the IPS log when I attempt to watch a youtube video from any android device:
id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-MULTIMEDIA Adobe Flash Player MP4 sequence parameter set parsing overflow attempt" group="340" srcip="208.117.232.242" dstip="***.***.***.***" proto="6" srcport="80" dstport="47844" sid="23098" class="Attempted User Privilege Gain" priority="1" generator="1" msgid="0"
But I don't get that error when I watch the same videos from a PC in the same firewall. I would rather not have to setup an exceptions list for the android devices. Clearly there is some kind of bug? Or am I missing something?
id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-MULTIMEDIA Adobe Flash Player MP4 sequence parameter set parsing overflow attempt" group="340" srcip="208.117.232.242" dstip="***.***.***.***" proto="6" srcport="80" dstport="47844" sid="23098" class="Attempted User Privilege Gain" priority="1" generator="1" msgid="0"
But I don't get that error when I watch the same videos from a PC in the same firewall. I would rather not have to setup an exceptions list for the android devices. Clearly there is some kind of bug? Or am I missing something?