This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mac printing causing IPS Rule Blocks

I have a user printing from a MAC to ta sharp printer and every time he does, his printer hangs and I get Snort notifications of CRIT-852.

Rules triggered are:
15890
15888
15889

Any idea why these are causing problems? Once his print queue hangs he is stuck until he reboots.

This thread was automatically locked due to age.

Parents

0 BAlfson over 15 years ago

Instead of disabling rules, I use a source and destination exclusion for printers to get around this.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 15 years ago

Instead of disabling rules, I use a source and destination exclusion for printers to get around this.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 skydiver over 15 years ago in reply to BAlfson

It would be nice to make the source/destination exclusions rule specific.  If you don't then you wind up opening up the target device to getting hacked...

I guess the defense in layers approach requires a choice at this point.  I look forward to many more of these types of choices as I incrementally tighten up the security settings on our network.

Thanks to all for the help.  I hope this helps others in the future as well.
Cancel
Vote Up 0 Vote Down

Cancel