IPS Signature Update today caused DNS/Server issues
Anyone else have this issue today? Around 12 PM Central Time, the IPS Signature was updated to 18.147 and then immediately most of my work laptops would not print or connect to servers. Using Traffic Monitor, I was able to see that Signature ID 1112378 was being DENY-ed. Once I created exception, things were normal again.
https://securityportal.watchguard.com/Threats/Detail?ruleId=1112378&sigVers=18
0
Sign In to comment.
Comments
Same issue here
Hello Manley,
False-positive. Please see this Known Issue that was published.
https://techsearch.watchguard.com/KB?type=Known Issues&SFDCID=kA16S000000XeM6SAK&lang=en_US
Run manual IPS signature update to roll-back to signature set 18.146.
Ralph
I was in the same situation. It's great to know that we were not alone.
Came here to report the same issue and cause, but looks like you lot beat me to it - SMB in particular was not happy, although pinging and DNS seemed to work fine. Disabled IPS on a few select policies on a hunch and blam, everything started working again.