DPI - port violation

Unanswered Question
Apr 8th, 2009
User Badges:

Hi,


Can anyone help me here a little bit? I am trying to set up a DPI with port violation feature.


As soon as I set it up I can't access any websites. On the syslog server I get:


427: 000421: .Apr 8 14:09:16.755 %APPFW-4-HTTP_DEOBFUSCATION: Deobfuscation signature (15) detected - resetting session 10.10.10.10:5467 198.133.219.25:80 on zone-pair INSIDE-INTERNET class http_pvm_cm appl-class http_dpi_cm


Anybody could help me to find out what I am doing wrong?


Thanks in advance.

Remi

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
smalkeric Tue, 04/14/2009 - 08:54
User Badges:
  • Silver, 250 points or more

Explanation The HTTP message has been detected to violate the de-obfuscate application firewall inspection rule.


Recommended Action This message is informational only, but may indicate a security problem.


Actions

This Discussion