Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 1297 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[7.500] Skype being blocked

Tribmos
Upgraded to 7.5 today and now i'm receiving Intrustion Prevention Alerts for skype

Classification : Potential Corporate Privacy Violation IP protocol
Snort IDs : 5693, 5998

The packets are therefore getting dropped.  However skype is allowed and I cannot find the setteing that is causing the blocks.

under IM/P2P skype is set to "log"


This thread was automatically locked due to age.
Parents
  • 0
    i put 5998 and 5693 in as disabled in the modify rule under advanced.  Still is blocking.

    Going to disable the whole skype attack pattern and hope that takes care of it.  Hate to do that, but really dont understand why they are being blocked.
  • 0 in reply to Tribmos
    are you sure you used the righ sig ids?  it's the number that follows the "sid=" in the log.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply Children
No Data