Guest

Preview Tool

Cisco Bug: CSCur75256 - Skype client doesn't block with multiple Snort instances

Last Modified

Sep 16, 2016

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

4NonBlondes

Description (partial)

Symptom:
Can't block Skype client with multiple snort instances.

Conditions:
Create a block with reset rule for Skype (all skype related apps included) and turn on logging
From a live endpoint (Android 4.4 in this case), the block works fine on the single core 5512 ASA, but not on the 8140 3D sensor (multicore). Discussed this with Costas.

OS	Sourcefire Linux OS 5.4.0 (build126)
Snort Version	2.9.7 GRE (Build 175)
Rule Update Version	2014-11-11-003-vrt
Rulepack Version	1425
Module Pack Version	1649
Geolocation Update Version	2014-11-08-001
VDB Version	build 224.4 ( 2014-11-13 23:49:32 )
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.