Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 8 replies
  • Subscribers 0 subscribers
  • Views 2736 views
  • Users 0 members are here
Options
Suggested

[9.165][CLOSED] How to unblock devices after advanced threat has blocked them

RaveNet
Even though advanced threat protection has now been disabled, devices that it had reported as false positives, basically all our blackberry 10 devices, are still blocked from internet over wifi.  How do we unblock these?
Parents Reply Children
  • 0 in reply to kofi
    Hi,

    can you look the ips.log. Maybe the traffic is blocked from ips.

    Best,
    Kofi


    Yes, it appears IPS is blocking them.  I'd say this rule is busted as it appears to block all BlackBerry 10 devices

    2013:11:04-10:27:33 vpn snort[4550]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="OS-MOBILE Android User-Agent detected" group="199" srcip="192.168.x.x"
Unfiltered HTML