Disable IP Audit Signature still generating alert on ASA

Unanswered Question
Jun 10th, 2009
User Badges:

Hi,


We have a pair of ASA 5540's in a failover configuration.


We have upgraded the primary active unit to v8.2(1) and have left the standby in 7.4(2). Although we get warning messages, failover works so I am leaving the standby unit on 7.4 for a week incase we experience any major issues with v8.2(1).


We are currently experiencing alot of false positive IP Audit alerts from sig 1103 (IP Teardrop). I have disabled this signature in the IP Audit settings within ASDM (v6.2(1)) yet the alert is still being generated.


I have tried removing the entire IP Audit policy and re-applying, yet the alert messages still get generated.


Has anyone else epxerienced this on v8.2 or have a solution for my problem ?


Thanks in advance.


Chris.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Pravin Phadte Wed, 06/10/2009 - 01:50
User Badges:
  • Silver, 250 points or more

would suggest to updage both the firewalls to 8.0(4) version

Actions

This Discussion