This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

List of IPS rules, their description and understand if a patch or misconfiguration is in place

UTM9 used to have a html page like this one:

https://lists.astaro.com/ASGV9-IPS-rules-2970.html not reachable anymore where filtering per rule id, we were able to find signature details, CVE and other additional information in order to help administrators if a patch on system/piece of software was missing or just remove that signature because of false positive.

Now on XG not all the signature can be found on internet. In Sophos, can you make sure to build a list with all the signatures and how to deal with them?

Thanks

This thread was automatically locked due to age.

0 waghelak over 8 years ago

Hi

I fully agree with this request, I believe it will help the community immensely going forward to work on any false positives especially seeing we are getting quite a lot more now than I was when using UTM9.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago

sachingurung, Aditya Patel can you investigate when a Public URL will be available for us for IPS signature like UTM 9 and which are the actions the users need to do in order to understand if the IPS signature matched is a false positive or a misconfiguration, patch missing, etc...?

This is really important. All the time I have to investigate for IPS Rules and signature on behalf of my customers.

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 FabioTerrone over 8 years ago in reply to lferrara

I ask the same and if it is possible to recieve by email the list and the new one CVE covered by XG.
Cancel
Vote Up 0 Vote Down

Cancel
0 FabioTerrone over 8 years ago in reply to FabioTerrone

UP waiting a reply from Sophos.

Is there a way to have automatically a list of all CVE resolved by the IPS.

A simple email where is reported the last updated signatures and a place where to find all the CVE covered ?
Cancel
Vote Up 0 Vote Down

Cancel