Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS triggers alert notification even with exception

Hello,

i have a DMZ host generating IPS Alerts on the UTM 9.5:

"OS-WINDOWS Microsoft Active Directory LDAP cookie denial of service attempt"

if i make an IPS exception with exactly the involved host IP the Alert Notifications still get send. hundreds of them per hour.

Why is it still generating Alerts even with the exception in place and how can i stop this?



This thread was automatically locked due to age.
  • Hallo Bernd,

    Please show a related line from the Intrusion Prevention report and a picture of the Edit of the Exception that you made.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA