Loading Profile...
Sunbelt Personal Firewall generating false positives on the NIPS module
False positives in the NIPS module of Sunbelt Personal Firewall version 4.6.1839.0 are blocking communications for a few of my applications. The only workaround I found so far is to permit medium priority intrusions, but I don't like this at all. It all started after I installed Service Pack 3 for Windows XP. Some of the messages logged (among others) are "ICMP PATH MTU denial of service", "ICMP L3retriever Ping" and "ICMP Dstination Unreachable Communication Administratively Prohibited". The sources of the bogus attacks are my VPN Gateway, company DNS servers and machines within my company's corporate firewall.
The quickest way to reproduce the problem is to run an Excel spreadsheet which tries to refresh with an ODBC query. Copying large files to another computer in my home network also triggers the firewall behavior.
Any help is deeply appreciated.
The quickest way to reproduce the problem is to run an Excel spreadsheet which tries to refresh with an ODBC query. Copying large files to another computer in my home network also triggers the firewall behavior.
Any help is deeply appreciated.
9
people have this problem
I have this problem, too!
Tell me when someone solves it.
The more people who report this problem, the more it gets noticed.
The more people who report this problem, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
-
Inappropriate?Thanks for posting!
We have seen some cases where NIPS is blocking some legitimate intrusions.
For now, the only way to get around this is to set medium intrusions to "Allow." Since NIPS is the culprit I would like to get your logs so we can get this resolved permanently.
1. First open SPF
2. Then under overview select preferences, then export
3. A window will popup, select the logs folder, then at the bottom of the window to the right of file name type in spf4, and hit save.
4. Next run the utility below, if you get any warnings about Windows Scripting or a Zip program you will need to allow them in order to successfully use this utility.
5. Once the utility is finished it will place a zip file on your dekstop, send this file into in a reply email as an attachment. You will also need to enter in your ticket id which is provided below.
[001-00-231272]
SPF support Utility:
http://tinyurl.com/6lmuha
Send the .zip file to support@sunbelt-software.com and reference ticket # 001-00-231272.
Thanks,
Jason Layman -
