Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 10734 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS Blocking Ebay Signin

M8ey

Hi all,

 

I am new to XG so please be nice :-)

Running XG230 with SFOS 16.05.2 MR-2 and IPS Signatures 3.13.35

 

I have this wee issue that when a user tries to login to eBay they basically time out. Getting to eBay is fine but when they add a user / pass for eBay its redirected to signin.ebay.com.au and times out.

In the IPS log files I can see that its getting blocked as the XG thinks its a 

1100834
HTTP DoS Attack - Slowloris
Web Services and Applications
Linux,Windows

 

I believe this is a false positive.

How can I add the signin on eBay to bypass this?



This thread was automatically locked due to age.
Parents
  • 0

    Ian,

    Welcome to Sophos community. In order to allow tour users to access eBay website properly, identify which ips signature is matched and which ips profile you are using then go to IPS, ips profile and change the default action of the signature from block to allow.

    Regards

  • 0 in reply to lferrara

    Thanks lferrara,

     

    I did get that far and changed that one IPS to Allow which lets eBay through.

    The concern now is that the XG230 will allow that HTTP for all sites even those that might be nasty.

    This particular one isn't too bad so not too worried though.

Reply
  • 0 in reply to lferrara

    Thanks lferrara,

     

    I did get that far and changed that one IPS to Allow which lets eBay through.

    The concern now is that the XG230 will allow that HTTP for all sites even those that might be nasty.

    This particular one isn't too bad so not too worried though.

Children
No Data