I'm am using a modigied 128MB.sdf signature file on an 1841 router running the latest release branch IOS. I've noticed that Bittorrent traffic gets blocked by the Bittorrent / P2P signature, even though they are only set to audit the traffic, not drop or reset. Why is this???
If I disable these signature traffic flows normally. The IPS rule is set on the WAN port inbound only..