I have a strange problem on an ips mc / secmon 2.2 solution. When I open the security monitor from a specific time and date, the console shows events that have occurred prior to the date that I requested.
Before experiencing this problem, I manually set the clock on the server forwards by one week as I wanted to force the server to in to running its reports earlier. I am starting to think that this could be the cause of the problem but I cant be sure. The SecMon also appears to no longer get new events once it is completely opened.
Does any one have any experience with a similar problem and if so how can I resolve it.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...