This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG Firewall Preventing Anti-Virus Update

I'm using Astaro Security Gateway V 8.308 with computers on the local network using Sophos Endpoint Security and Control v9.5.

I've stopped being able to get Sophos updates on all machines on the ASG network. When I check the Intrusion Protection Logs I consistently see the ASG blocking the download with a log entry similar to:

2013:01:17-16:09:04 asg snort[6600]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="drop" reason="FILE-PDF Adobe PDF start-of-file alternate header obfuscation" group="340" srcip="204.183.124.177" dstip="192.168.1.200" proto="6" srcport="80" dstport="1827" sid="16354" class="Misc activity" priority="3" generator="1" msgid="0"

Sophos fails with an error could not download file.

How can I get around this?

This thread was automatically locked due to age.

0 Scott_Klassen over 12 years ago

Go to the Advanced Tab in the Intrusion Prevention Section. Create a rule modification to disable rule ID 16354
Cancel
Vote Up 0 Vote Down

Cancel