CSC SSM - File Blocking disabled (Receiving Block Alerts)

Unanswered Question
Jan 26th, 2010
User Badges:

Hello,


We have a .Net application running on web server farm.

CSC-SSM is used for perimeter http protection.


I can find the below errors via email notification


- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled banner4.swf.
- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled ScriptResource.axd?d=heF25Tu......
- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled WebResource.axd?d=heF25Tu......


Even though I have disabled 'File Blocking' functionality, why do I get file blocking notifications and what is wrong with swf, axd file.


Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Kureli Sankar Tue, 01/26/2010 - 13:46
User Badges:
  • Cisco Employee,

Make sure you are running the latest code on the CSC module (6.3.1172.1.pkg) Also, you have disabled file blocking? Or just have unchecked certain extensions.  Make sure .exe is not checked.


-KS

dedra_live Tue, 01/26/2010 - 21:57
User Badges:

Hello,


I can see the following in HTTP logs repeating every few minutes


HTTPLOG | select() timeout on keep-alive idle
[12] Read error : [104:Connection reset by peer]


Both the CSC-SSM modules have synchronized with the failover peer successfully.


Thanks.

Actions

This Discussion