[kaspersky on webserver]

Thanks for your feedback

 

No isn’t Could . on prem

[KES v11 Block communication]

Hi,

 

We have a server with IIS application run on it . Kaspersky Endpoint Security version 11  block communication from the load balancer ( from the VS) to that server.

 

Here is some details 

 

User: DOMAIN\Username (Active user)

Component: Network Threat Protection

Result description: Blocked

Name: UMIDS:Intrusion.Generic.CVE-2021-44228.b

Object: TCP from 172.16.X.X at 172.17.X.X:80 

Object type: Network packet Object name: TCP from 172.16.X.X at 172.17.X.X:80

Additional: 172.17.X.X

Database release date: 206/02/2022 07:08:00

 

NB 1: 172.16.X.X (VS) 172.17.X.X (Server)

NB 2 : Load Balancer is not affected by Log4J vulnerability.

 

Please help !!!!

[kaspersky on webserver]

Hi,

 

I have the same problem. We have a server with IIS application run on it . Kaspersky Endpoint Security version 11  block communication from the load balancer (VS) to the server.

 

User: DOMAIN\Username (Active user)

Component: Network Threat Protection

Result description: Blocked

Name: UMIDS:Intrusion.Generic.CVE-2021-44228.b

Object: TCP from 172.16.X.X at 172.17.X.X:80 

Object type: Network packet Object name: TCP from 172.16.X.X at 172.17.X.X:80

Additional: 172.17.X.X

Database release date: 206/02/2022 07:08:00

 

NB : 172.16.X.X (VS) 172.17.X.X (Server)

 

Please help !!!!