B
Bonni_018
Guest
When this happens I have to switch to a new location, after awhile it will happen again. I’m trying to figure out if this is a false positive. I don’t want to disable the rule if it is doing its job.
So when this happens the attack or false positive is directed at the device with the VPN. The address/ IP is the same as the VPN server address directed towards my IPad in this scenario. My Intrusion Prevention is dropping 20 packets a second when this happens. Sometime the very last digit is off by one number from the IP presented by the Nord VPN App. So if the app says 98.142.213.24, the intrusion prevented address might be 98.142.213.23.
The source port and destination port are 4500. When the Intrusion Prevention blocks this signature the internet is blocked. I then switch to another location and until the system blocks that new IP I am able to surf the web.
Im thinking this is a false positive but want to make sure. It seems as if threat prevention is blocking the VPN from connecting. I could disable the rule but want to make sure I’m In the clear. The address being blocked is the VPN address directed at the device using the VPN. Thanks for any help
More...
So when this happens the attack or false positive is directed at the device with the VPN. The address/ IP is the same as the VPN server address directed towards my IPad in this scenario. My Intrusion Prevention is dropping 20 packets a second when this happens. Sometime the very last digit is off by one number from the IP presented by the Nord VPN App. So if the app says 98.142.213.24, the intrusion prevented address might be 98.142.213.23.
The source port and destination port are 4500. When the Intrusion Prevention blocks this signature the internet is blocked. I then switch to another location and until the system blocks that new IP I am able to surf the web.
Im thinking this is a false positive but want to make sure. It seems as if threat prevention is blocking the VPN from connecting. I could disable the rule but want to make sure I’m In the clear. The address being blocked is the VPN address directed at the device using the VPN. Thanks for any help
More...