Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 2 subscribers
  • Views 4127 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS Preventing YouTube Buffering

PG10
For some reason YouTube videos are not allowed to buffer completely. The IPS Live Log shows the following line:

2012:11:26-22:24:35 asg snort[6976]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="WEB-CLIENT 3ivx MP4 file parsing cpy buffer overflow attempt" group="500" srcip="173.194.53.153" dstip="192.168.12.125" proto="6" srcport="80" dstport="64311" sid="13320" class="Attempted User Privilege Gain" priority="1" generator="1" msgid="0"

I am running ASG V8.307 software appliance on a PowerEdge 2850.

I guess I have a few different questions: Why is this happening? I have never had a problem with it in the past. Is it OK to disable that IPS rule? Should I try to make an exception? Do I have something set wrong?

I appreciate any help I can get on this!

Thanks.

-Phil


This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to PG10
    I'm running into many different scenarios where an IPS Rule is stopping something. Right now I find out what Rule number is being "violated" and go in and Disable that Rule. I'm getting quite a large list of Disabled Rules and I'm thinking that eventually, this is going to make the IPS useless. What is the best way to handle these violations? Is everyone else doing the same thing I am?
Children
No Data