CSC SSM - File Blocking disabled (Receiving Block Alerts)

[dedra_live]

Hello,

We have a .Net application running on web server farm.

CSC-SSM is used for perimeter http protection.

I can find the below errors via email notification

- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled banner4.swf.
- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled ScriptResource.axd?d=heF25Tu......
- The InterScan for CSC SSM detected an attempt to transfer a blocked file titled WebResource.axd?d=heF25Tu......

Even though I have disabled 'File Blocking' functionality, why do I get file blocking notifications and what is wrong with swf, axd file.

Thanks.

[Kureli Sankar]

Make sure you are running the latest code on the CSC module (6.3.1172.1.pkg) Also, you have disabled file blocking? Or just have unchecked certain extensions.  Make sure .exe is not checked.

-KS

[dedra_live]

Hello,

I can see the following in HTTP logs repeating every few minutes

HTTPLOG | select() timeout on keep-alive idle
[12] Read error : [104:Connection reset by peer]

Both the CSC-SSM modules have synchronized with the failover peer successfully.

Thanks.

[Kureli Sankar]

I found this defect CSCtd04067. 6.3.1172.2.pkg was released yesterday. Pls. upgrade to that code and see if the problem goes away.

code can be downloaded here: http://www.cisco.com/cgi-bin/tablebuild.pl/csc

-KS