Is there anything in the ips.log? This could be very helpfull ... also which policy is running, is the IPS running in ALERT mode or DROP mode (>>webadmin>>network security>>intrusion prevention>>policy) ?
For me, it was set in drop mode... same settings as in 7.911. Interestingly, there were no log entries to be found when I discovered the issue. I guess I'll try re-enabling IPS to see if I get some.
CTO, Convergent Information Security Solutions, LLC
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
For me, it was set in drop mode... same settings as in 7.911. Interestingly, there were no log entries to be found when I discovered the issue. I guess I'll try re-enabling IPS to see if I get some.
CTO, Convergent Information Security Solutions, LLC
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Hmm... it's working now... the system has since updated to pattern 12473. Interesting tidbit... I seem to recall log entries being created when IPS is disabled (in the IPS log)... not seeing that, it just dies silently... I do now see entries when it starts though.
CTO, Convergent Information Security Solutions, LLC
Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
