Hi,
I suspect this will be a duplicate report. It appears similar to one that is reported as being fixed with a new IPS update earlier today (14 July).
I decided to investigate one of the sites that has been attacking my ASG for over day. I plugged the ip address into firefox and tried to connect. The HTTP proxy dropped/blocked all connections for all users and CPU usage ran to about 30%.
I killed the session and everything returned to normal. Interestingly the attacks or the reporting of the attacks stopped at the same time.
The attacks were using udp port 7527.
Ian M
Wrong, I crashed the PPPoE connection as well.