This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[understanding] IPS active patterns = 0 ?

Hi there

i found some thing on my Sophos UTM which i don't understand.
In the dashboard stands:

Intrusion Prevention is active with 0 of 18229 patterns

[:S]
is this normal?

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi, it's not normal.

Do you have a support contract?

Anything odd in the IPS log?

What happens if you disable and re-enable the IPS?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 traxxus_01 over 11 years ago

Good morning

I am a home user with a home user license. So, nu sopport contract.

Turn off/on the IPS doesn't help, a reboot doesn't help too.

Logs:

Turning off the IPS:
2013:12:24-11:16:24 traxxus snort[7989]: Could not remove pid file /var/run//snort_1.pid: Permission denied
2013:12:24-11:16:24 traxxus snort[7989]: Snort exiting

Turn on the IPS results in a huge list of log: Sophos UTM IPS Log - Pastebin.com

:-/
Cancel
Vote Up 0 Vote Down

Cancel
0 traxxus_01 over 11 years ago

I'm assuming i have the same problem like this guy had:

https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/40735

Is it a bug? The solution is to reinstall the UTM.... damn
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

Is it a bug? The solution is to reinstall the UTM.... damn

It's not a bug, but it may be a disk failure.

Cheers - Bob

Sorry for any short responses. Posted from my iPhone.
Cancel
Vote Up 0 Vote Down

Cancel