Hi All,
Hi All,
We've a Web Site (based on IIS) behind a firewall,a
Server Sensor is installed on that Server, I am
getting the event :
HTTP_Proxy_Cache_Poisoning , and the Status is :
Failed attack (blocked at host)
The thing that I find abnormal: is that this event is
from the Local Server to the Internet, (Inside-->
outside), more, we have neither a Proxy behind the
machine nor a proxy is installed on the Server,
My question is:
Why I ma getting Failed attack (blocked at host)
since the event (attack) is outgoing from the Server?
I remarked that the access to our site is somehow
slow, does the BLOKE action involve it?
Thanks
Hic Sonni
__________________________________
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
