Guest

Preview Tool

Cisco Bug: CSCtb25674 - MARS - Inactive Reporting Devices creates false alerts for Snare Agents

Last Modified

Feb 22, 2014

Products (1)

  • Cisco Security Monitoring, Analysis and Response System

Known Affected Releases

6.0(5)

Description (partial)

Symptom:
The system creates alerts for Inactive Reporting Devices for Windows hosts running IIS and using the Snare agents despite having received new events in the required time frame.

Conditions:
Windows hosts using Snare for Windows and Snare for IIS (Web Server).
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.