S441 Sig 21622/1 activity

Answered Question
Oct 14th, 2009

After deploying sig update 441 we are seeing a tremendous amount of alerts for subsig 1.

It seems unusual, the Fidelity rating is 90, which means likelihood of this being a false positive is minimal.

Is anyone else seeing a high number of alerts?

I have this problem too.
0 votes
Correct Answer by wsulym about 7 years 3 months ago

Updated version of that will be in S442. Which should be on CCO shortly.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
charles lewis Wed, 10/14/2009 - 08:28

I am seeing quite a few hits on that subsig as well. Several images being blocked from different credible domains.

JonPBerbee Fri, 10/16/2009 - 07:47

We are seeing this signature kick of a lot of alerts as well. Just wondering if Cisco has confirmed there is something wrong with Sig 21622?

Correct Answer
wsulym Fri, 10/16/2009 - 08:07

Updated version of that will be in S442. Which should be on CCO shortly.

Actions

This Discussion