Endpoint Protection

 View Only
Expand all | Collapse all

Top source of attacks shows Zero

  • 1.  Top source of attacks shows Zero

    Posted Jul 26, 2010 05:21 AM

    The console shows that we have some attacks in our network ( and I am sure we have some), however the report shows the number of attacks zero.
    What can be the issue?

    We have
    Almost 2000 Clients
    3 SEPM server
    DB is SQL 2005

    We have recently upgraded to MR6 and we didn't have the issue before the upgrade.



  • 2.  RE: Top source of attacks shows Zero

    Posted Jul 26, 2010 05:51 AM
    i think you should create a report for attacks than top source of attacks


  • 3.  RE: Top source of attacks shows Zero

    Posted Jul 26, 2010 06:18 AM
      |   view attached

    Maybe this report clarifies more
     

    Attachment(s)

    pdf
    Report1.pdf   131 KB 1 version


  • 4.  RE: Top source of attacks shows Zero

    Posted Jul 26, 2010 06:20 AM
    Rafeeq
    would you plz explan more. What should I exactly do?


  • 5.  RE: Top source of attacks shows Zero

    Posted Jul 26, 2010 09:02 AM
    any hint?


  • 6.  RE: Top source of attacks shows Zero

    Posted Jul 26, 2010 10:30 AM
    Restart SEPM service once and try to create reports again....


  • 7.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 03:28 AM
    I restarted the SEPM services, but didn't work.
    Another point is that the Attacks graph in the Home section disapears and shows a cross something like can't open picture.


  • 8.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 03:55 AM
    Can you provide us a screen shot...


  • 9.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 04:00 AM
      |   view attached
    The screen shot


  • 10.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 04:16 AM

    Surprise!!!
    Eventually the graph comes up with no issue! But it disappears sometimes!
    Come on! That is crazy!
    Alright, let me summarize:
     

    1. The Top source of attack report shows ZERO, although the graph shows we have intrusions
    2. The Attack graph disappears and shows error
    3. The Attack graph is shown without any issue eventually and disappears every now and then


  • 11.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 04:17 AM
    Do you tried by removing IE enhanced security?


  • 12.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 04:18 AM
    Try this also
    KB 935560


  • 13.  RE: Top source of attacks shows Zero

    Posted Aug 02, 2010 04:18 AM
    Are you remotely accessing the SEPM???
    Check the screen resoltuion it should be 32 bit. for clour quality.


  • 14.  RE: Top source of attacks shows Zero
    Best Answer

    Posted Aug 02, 2010 05:49 AM
    The reason that the Top Source of Attacks was ziro:
    the IPS policy has a tick indicating whether the policy should be enabled or not. It was not checked!