cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

FTP Bounce prevent instead of inactive ?

Hi,

I get an issue with an IPS on the customer environment.

We have a global rule with parameters with Prevent mode.

I would like to make an exception on smtp flow to Exchange server, and put this exception to Detect mode.

However, instead of the Detect mode configuration, I get a prevent...

If I put the same rule in inactive mode, this is inactive.

Someone can explain me this behavior ?

I have already open a ticket to TAC, but nothing for now....

Thanks for your help guys!

Arthur

0 Kudos
2 Replies

Re: FTP Bounce prevent instead of inactive ?

Hello

same issue for me (but not tested the "inactive" mode yet), in R80.10

Did yo get a solution ? what version do you have ?

Thanks,

Stefane

0 Kudos

Re: FTP Bounce prevent instead of inactive ?

Hello,

Unfortunately the only solution for me is to use inactive mode...

Same issue in R77.30 and R80.10, and Checkpoint is not able to reproduce or investigate the issue without a loooott of logs/packet capture from customer infrastructure... So ticket closed /:

0 Kudos