Jump to content

Our Ips Is Flagging Major Public Pages Pages


izatt82
 Share

Recommended Posts

Since some time on Friday when we use Chrome to browse sites like MSN or yahoo our IPS system is banning users with IBM.Domino.iNotes.Foldername.Buffer.Overflow as the type. Is anybody else seeing this type of thing? It does not happen at all with IE, but firefox does seem to have the same results as Chrome. Our logging for this event isn't helpful and just wanted to see if we were all alone or not.

Link to comment
Share on other sites

Could plugins for non IE browsers be causing it? is it on every workstation it happens on, or only certain workstations?

Link to comment
Share on other sites

Could plugins for non IE browsers be causing it? is it on every workstation it happens on, or only certain workstations?

Yes it is on everyone. This is looking like the problem started when the IPS defs updated on Friday right when the problem started happening.

Link to comment
Share on other sites

Contact the vendor, see if they are getting reports of false positives, or if you need to whitelist the said browsers. Also, check your traffic, make sure they aren't in fact catching something it truly found that matches the ruleset.

Link to comment
Share on other sites

Contact the vendor, see if they are getting reports of false positives, or if you need to whitelist the said browsers. Also, check your traffic, make sure they aren't in fact catching something it truly found that matches the ruleset.

Vendor was no help, but after some further inspection of the network traffic we are comfortable with white listing that event.

Thanks for the replies and i am glad it wasn't more than that :D

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...