We faced issue where in Checkpoint IPS flagged certain traffic between ePO server and a remote repository (SuperAgent) and was rejected , thus causing file replication fail between ePO and SuperAgent over Port 8081
When we checked firewall for logs , it was particular identifying the traffic as SQL injection for HIPS content.
As we checked HIPS content included files for HIPS and the ePO part that require SQL code for rules to be added / removed or modified in the ePO DB.
In the end we had to put exception in IPS to trust ePO traffic and everything worked fine.
Hope this helps
When we checked firewall for logs , it was particular identifying the traffic as SQL injection for HIPS content.
As we checked HIPS content included files for HIPS and the ePO part that require SQL code for rules to be added / removed or modified in the ePO DB.
In the end we had to put exception in IPS to trust ePO traffic and everything worked fine.
Hope this helps
Comments
Post a Comment