Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 733 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web-* Rules

System-Z
The rules that start with web-* are they useless to turn on if you do not run a webserver? I get alot of false positives with this.  Mainly a few CGI's and a few PHP's, like viewtopic.php, viewforum.php and privmsg.php with CGI I get

WEB-CGI calendar access - ID 882 
WEB-CGI redirect access - ID 895 

which I'll be visiting a webpage that has the latest phpbb and get an alert and it drops my packets.


This thread was automatically locked due to age.
Parents
  • 0
    Part of "tuning" the IDS is to turn off the rules that don't apply to your organization. So, if you don't have internal web servers, or mySQL server, Oracle, etc, I don't know why you'd be running the rules. Turn them off.
Reply
  • 0
    Part of "tuning" the IDS is to turn off the rules that don't apply to your organization. So, if you don't have internal web servers, or mySQL server, Oracle, etc, I don't know why you'd be running the rules. Turn them off.
Children