Sophos Firewall

Discussions 17536 SERVER-WEBAPP generic server HTTP Auth Header buffer overflow attempt

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 26 subscribers
Views 783 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

17536 SERVER-WEBAPP generic server HTTP Auth Header buffer overflow attempt

Eric Crites over 5 years ago

I have just the basic setup and my laptop is being blocked and in the IPS log getting the following critical drop

17536

SERVER-WEBAPP

generic server HTTP Auth Header buffer overflow attempt

This thread was automatically locked due to age.

Top Replies

Eric Crites over 5 years ago in reply to emmosophos +1

Thats whats odd about it, it logs even when no browser is open. Its a school issued laptop im almost wondering if its a application trying to phone home or something. But the message is so vague i cant…

Parents

0 emmosophos over 5 years ago

Hello Eric,

Thank you for contacting the Sophos Community!

What is the website you are trying to visit, the XG is detecting something in the communication which is triggering that alert.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Eric Crites over 5 years ago in reply to emmosophos

Thats whats odd about it, it logs even when no browser is open. Its a school issued laptop im almost wondering if its a application trying to phone home or something. But the message is so vague i cant determine what it is thats triggering it.
Cancel
Vote Up +1 Vote Down

Cancel
0 emmosophos over 5 years ago in reply to Eric Crites

Hello Eric,

Yes most likely it is an application, you might find a bit more of information on the ips.log

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 5 years ago in reply to Eric Crites

Hello Eric,

Yes most likely it is an application, you might find a bit more of information on the ips.log

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data