Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Possible detection issue with Deep Security Update 17-020 (CVE-2017-0171)

    • Updated:
    • 11 May 2017
    • Product/Version:
    • Deep Security 10.0
    • Deep Security 9.6
    • Platform:
    • N/A N/A
Summary

Trend Micro is aware of a potential detection issue with Deep Security Update 17-020 (DSRU ID : 17-020). We are currently investigating the issue and will update this article with further details as they become available.

Details
Public

Recommended Action

Trend Micro released an updated Deep Security rule DSRU 17-021 to mitigate the potential detection issue. Customers are advised to update to the latest Deep Security rule.

Temporary Workaround

If you are unable to update to the new rule, change the IPS rule's action to Detect Only mode:

  1. Access the Deep Security Manager (DSM) web console.
  2. Go to the Policies tab > Common Objects > Rules Intrusion Prevention Rules.
  3. Search for the rule "1008332" and open its properties.
  4. In the General tab, tick the Detect Only check box.
  5. Click Apply and OK.

The procedure above should set the action for this rule to "Detect Only" once triggered.

Premium
Internal
Partner
Rating:
Category:
Troubleshoot
Solution Id:
1117377
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.