izatt82 Posted April 30, 2012 Share Posted April 30, 2012 Since some time on Friday when we use Chrome to browse sites like MSN or yahoo our IPS system is banning users with IBM.Domino.iNotes.Foldername.Buffer.Overflow as the type. Is anybody else seeing this type of thing? It does not happen at all with IE, but firefox does seem to have the same results as Chrome. Our logging for this event isn't helpful and just wanted to see if we were all alone or not. Quote Link to comment Share on other sites More sharing options...
digip Posted April 30, 2012 Share Posted April 30, 2012 Could plugins for non IE browsers be causing it? is it on every workstation it happens on, or only certain workstations? Quote Link to comment Share on other sites More sharing options...
izatt82 Posted April 30, 2012 Author Share Posted April 30, 2012 Could plugins for non IE browsers be causing it? is it on every workstation it happens on, or only certain workstations? Yes it is on everyone. This is looking like the problem started when the IPS defs updated on Friday right when the problem started happening. Quote Link to comment Share on other sites More sharing options...
digip Posted April 30, 2012 Share Posted April 30, 2012 Contact the vendor, see if they are getting reports of false positives, or if you need to whitelist the said browsers. Also, check your traffic, make sure they aren't in fact catching something it truly found that matches the ruleset. Quote Link to comment Share on other sites More sharing options...
izatt82 Posted April 30, 2012 Author Share Posted April 30, 2012 Contact the vendor, see if they are getting reports of false positives, or if you need to whitelist the said browsers. Also, check your traffic, make sure they aren't in fact catching something it truly found that matches the ruleset. Vendor was no help, but after some further inspection of the network traffic we are comfortable with white listing that event. Thanks for the replies and i am glad it wasn't more than that :D Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.