new incidents that match Drop rule.

[firewalz]

I keep getting "Sudden increase of traffic to a port" incidents that match a particular flow even though I have an active drop rule.

[aghaznavi]

Better solution is try re-imaging to the same version and restoring all the configs and see if this brings back the rule.

for example you need to re-image to 4.1.1 and the do a pnrestore.