terminated by IPS

[WEERAKOO69BA]

                  Dear all,

While trying to update antivirus server ,I am getting the follwoing message from the ASA-5520.(ASA has an IPS module,but not activated,by passed it)

Teardown TCP connection 170777296 for outside:10.1.1.1/80 to inside:12.1.1.5/61736 duration 0:00:00 bytes 1425 Flow reset by IPS

Teardown TCP connection 170777179 for outside:10.1.1.1/80 to inside:12.1.1.5/61734 duration 0:00:03 bytes 2190 Flow terminated by IPS

Any body has any clue ?

Thanks

[sawgupta]

Could you check on IPS if any signature had fired. Maybe some threat was detected.

CLI Command: "show stats virtual-sensor"

Regards,

Sawan Gupta