False positives in log for dns

Not sure on this either, seeing a ton of them on my 310 at work, but mine are all from Google DNS.

Hi folks,

there is an existing thread on the subject, not quite as bad as yours but still has been happening for a number of releases.

I have the same problem, but I cannot find the existing thread. Does anyone have a direct link to it?

try this.

community.sophos.com/.../ips---some-signature-are-false-positive

Peter, here the correct link:

https://community.sophos.com/products/xg-firewall/f/intrusion-prevention/89863/ips---some-signature-are-false-positive

Post there so we have a single thread that Sophos can follow.

Thanks

Hello

I have the same problem with OpenDNS. Was this ever solved?

Thanks

Roger

HI All,

Could you post your IPS version so we may check on our end.

HI All,

Could you post your IPS version so we may check on our end.

Aditya Patel 

I posted on the other post so we have one place where to share the issue.

https://community.sophos.com/products/xg-firewall/f/intrusion-prevention/89863/ips---some-signature-are-false-positive

The other post is older than this one.

Regards

3.13.41

HI All , 

I shall forward to the concern team and let you know further details.

Thanks Aditya Patel. Let us know.

Regards

Hi Aditya

Any movement on this.  I am new user (less than week into using XG for first time) and seeing multiple of the DNS UDP packets being marked as a spoof when they are not.