Cant receive hotmail emails when Cisco IPS switch on

[jonks]

I am having trouble receiving hotmail emails when i switch on our IPS on our internet gateways. Eveything else works but can receive email from hotmail or yahoo mail. As soon as i switch it off the mail is delievered. Any ideas?

 

[burtsbees]

Post a config please.

Burt

 

[kbing]

Check out this URL to disable the IPS signature:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123tcr/123tsr/sec_i1gt.htm#wp1188219

 

[burtsbees]

Out of curiosity, how do you know what signature is what in an SDF file? The example talks about signature 1000...is this matched with a protocol it's inspecting, I imagine, and if so, how does one tell which protocol?

Burt

 

[kbing]

You should be able to see what is being dropped in the log file. Below is a reference to how to configure IPS to notify to a log file.

http://www.cisco.com/en/US/products...erence_chapter09186a0080443b45.html#wp1188219

ip ips notify
To specify the method of event notification, use the ip ips notify command in global configuration mode. To disable event notification, use the no form of this command.

ip ips notify [log | sdee]

no ip ips notify [log | sdee]