No feedback from support at this point.  The CVE is older so I'm fairly confident it's a false-positive at this time. ... View more

Correct we were in prevention mode also which created the issues.  Yes, I've whitelisted the rule for time-being as the traffic is legit from the clients to servers.  It's not the first time we've had to do things like this to get production back up. ... View more

Had the same issue this morning.  We have about 34 sites some which have no local servers or domain controllers.  So users were having issues both logging into computers and when logged in being able to access file shares maintained over tunneled connections.   Believe this was some IDS rule change which sparked traffic being classified this am. ... View more