Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Signature 5366

Hi,

Please help me out to understand signature 5366, I am getting a lot of alert for this signature id, how can i know whether the machine from which i am getting this alert is really infected or is it just a false positive.

Thanks and Regards

Salim

1 REPLY
Cisco Employee

Re: Signature 5366

Hi Salim,

This is a known issue with regards to this Sig. Please refer the link :

http://www.cisco.com/cgi-bin/front.x/csec/getIDSInfo.pl?SIG_ID=5366&SIG_SUB_ID=0

or go to CSEC link - http://www.cisco.com/go/csec and follow the IDS signature links. In this case you can disable this particular sig on the Sensor if you see further false positives. Hope this helps

Thanks

Madhu

173
Views
0
Helpful
1
Replies