Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

FPs Sig 5545 subsig 1 - HTTP Request Smuggling

This signature FPs on a particular client POST, see attached text for examples.

2 REPLIES
Community Member

Re: FPs Sig 5545 subsig 1 - HTTP Request Smuggling

Could you provide some traffic samples of the entire http session. We would like to look into this further to improve this signature.

Thanks,

Jonathan

Community Member

Re: FPs Sig 5545 subsig 1 - HTTP Request Smuggling

Well, for signature actions I see the checkbox for "Log Pair Packets" but my version seems to be missing the "Log Pair Packets Retroactively" option.

Is this a command-line only option? :-)

If they start to show up again, I'll try to correlate a capture.

176
Views
0
Helpful
2
Replies
CreatePlease to create content