S441 Sig 21622/1 activity

Answered Question
Oct 14th, 2009
User Badges:

After deploying sig update 441 we are seeing a tremendous amount of alerts for subsig 1.


It seems unusual, the Fidelity rating is 90, which means likelihood of this being a false positive is minimal.


Is anyone else seeing a high number of alerts?

Correct Answer by wsulym about 7 years 8 months ago

Updated version of that will be in S442. Which should be on CCO shortly.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
charles lewis Wed, 10/14/2009 - 08:28
User Badges:

I am seeing quite a few hits on that subsig as well. Several images being blocked from different credible domains.

JonPBerbee Fri, 10/16/2009 - 07:47
User Badges:

We are seeing this signature kick of a lot of alerts as well. Just wondering if Cisco has confirmed there is something wrong with Sig 21622?

Correct Answer
wsulym Fri, 10/16/2009 - 08:07
User Badges:
  • Cisco Employee,

Updated version of that will be in S442. Which should be on CCO shortly.

Actions

This Discussion