cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
550
Views
10
Helpful
5
Replies

S441 Sig 21622/1 activity

barnettcd
Level 1
Level 1

After deploying sig update 441 we are seeing a tremendous amount of alerts for subsig 1.

It seems unusual, the Fidelity rating is 90, which means likelihood of this being a false positive is minimal.

Is anyone else seeing a high number of alerts?

1 Accepted Solution

Accepted Solutions

Updated version of that will be in S442. Which should be on CCO shortly.

View solution in original post

5 Replies 5

charles lewis
Level 1
Level 1

I am seeing quite a few hits on that subsig as well. Several images being blocked from different credible domains.

Same here as well. Seems this signature is causing false positives more than anything else.

We are seeing this signature kick of a lot of alerts as well. Just wondering if Cisco has confirmed there is something wrong with Sig 21622?

Updated version of that will be in S442. Which should be on CCO shortly.

Thank you for the heads up.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: