Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

ASA IPS and HP Jetdirect

Hello,

This week I started getting alerts from my IPS regarding the activity of some of my HP printers.  IPS is logging "1104-0 IP Localhost Source Spoof" .  I have sniffed what a few of the printers were doing and the only activity being sent to out the Internet towards the IPS is the printer trying to communicate with 127.0.0.1. 

Has anybody else experienced this type of behavior?

Thank you,

Jamie

1 REPLY

Re: ASA IPS and HP Jetdirect

Why don't you configure the printer correctly so that it does not use the loopback address for communication?

Or use 'even action filters' on the IPS to bypass these signatures for the concerned IP. Or disable the signature all together.

Regards

Farrukh

385
Views
0
Helpful
1
Replies
CreatePlease to create content