Cisco Bug: CSCtb25674 - MARS - Inactive Reporting Devices creates false alerts for Snare Agents
Feb 22, 2014
- Cisco Security Monitoring, Analysis and Response System
Known Affected Releases
Symptom: The system creates alerts for Inactive Reporting Devices for Windows hosts running IIS and using the Snare agents despite having received new events in the required time frame. Conditions: Windows hosts using Snare for Windows and Snare for IIS (Web Server).
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases