[Snort-users] strem5 session hijacked produce a lot of alerts with lb firewalls

carlopmart carlopmart at ...11827...
Wed Apr 6 07:41:11 EDT 2011


Hi all,

  Is it possible to restrict (or adjust) the level of alerts produced by 
"check_session_hijacking" stream5 option when traffic through a cluster 
of firewalls in load balancing mode?

  If I change load balancing by standby mode (active-passive), there 
will be no alerts ...

Thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com




More information about the Snort-users mailing list