05-20-2010 10:48 AM - edited 03-10-2019 05:00 AM
Hello,
when i enabled inline mode in AIP-SSM 10 sofware version 7.0 (1) E3 , VPN users are connected but when they try to open any application ex: outlook etc , it dos'nt open , i would like to know which signature is blocking this traffic .
05-20-2010 01:30 PM
Go ahead and check the events.
05-20-2010 03:00 PM
From the symtoms that you explain, normally it is the TCP normalizer engine signature that is causing the issue. Some of them are not actually configured to produce alert, so you might want to check via the "show stats virtual-sensor vs0"
The TCP normalizer engine is in the 1300 signature range.
Hope that helps.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: