This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to get details on 2 attacks blocked : rule 32488

Hi,

I had 2 attacks blocked, it is a bummer that I can't drill down on the actual text, but I found more detail in the "Network Protection" menu under "IPS: Top Blocked Attacks"

I can figure out the host inside that tried to send the packet out

I can figure out the two hosts that my internal machine tried to talk to

I can see the rule.

I cannot see:

1) the captured packet of what the payload was

2) I cannot see the time this event took place

3) I cannot see what the definition of the rule is to find out if this is a false positive.

Thanks,

Joe



This thread was automatically locked due to age.
Parents Reply Children
No Data