Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 1140 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS exception causes high CPU

Tricco
Hi there, adding an IPS exception cause high CPU and non-stateless connections like SSH or IPSec are unstable...

Our Sys: V 7.506 on ASG 320 

Added Exceptions: DNS host (dnl-00.geo.kaspersky.com,... up to dnl-09.geo.kaspersky.com)

After deleting (deactivation was not successful) the complete exception everything went ok.

Any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    Hi, if there's a LOT of IPS logging, it can slow down the system.

    Also, any change to the rules will cause Snort to be restarted, which can take a few minutes on a slower machine. During this time, you will lose connectivity, at least in v7.

    Barry
Reply
  • 0
    Hi, if there's a LOT of IPS logging, it can slow down the system.

    Also, any change to the rules will cause Snort to be restarted, which can take a few minutes on a slower machine. During this time, you will lose connectivity, at least in v7.

    Barry
Children
No Data