Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » IPS drop - VNC
  •  
martinw

Messages: 10
Karma: -2
Send a private message to this user
As of my upgrade to Kerio Control V7 I experience blocking of VNC-application.

Security log:
[12/Jun/2010 12:39:05] IPS: Packet drop, severity: High, Rule ID: 1:2002921 ET EXPLOIT VNC Multiple Authentication Failures, proto:TCP, ip/port:x.x.x.x:5934 -> x.x.x.x:62537

How do I make an exclusion for this application? I don't want to diasble IPS or change settings for high risk applications.

NAT rule has no protocol inspector and a range of VNC machines.

Martin

Kerio 7.1.0 on SBS2003
  •  
KursadOlmez

Messages: 118
Karma: 3
Send a private message to this user
Hi Martin,

Just add Rule ID 1:2002921 to Intrusion Prevention section by opening Advanced / Ignored Signatures.

http://proxima.web.tr/pub/kerio/2010-06-12_223958.png
  •  
martinw

Messages: 10
Karma: -2
Send a private message to this user
Thanks, I'll try asap.

[Updated on: Sat, 12 June 2010 22:43]


Kerio 7.1.0 on SBS2003
  •  
ZReau

Messages: 45

Karma: 0
Send a private message to this user
this doesn't work on kerio control 7.2.2 ???

it is still blocked by the ips
Previous Topic: How to separate hosts into two 'subnets' using WinRoute Firewall
Next Topic: IPS excludes won't work
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Nov 17 18:31:25 CET 2017

Total time taken to generate the page: 0.00416 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.