Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Warn UDM Adaptive Filter configuration disabled filter!

    • Updated:
    • 24 Aug 2017
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint SMS All
    • TippingPoint TPS All
    • TippingPoint Virtual SMS
    • TippingPoint Virtual TPS All
    • Platform:
Summary

Warn NP {Bl1 } Regular Expression exceeded engine time limit (100000): Policy: [00000002-0002-0002-0002-000000013593] took [100003] 

Warn UDM Adaptive Filter configuration disabled filter "13593: HTTP: Adobe Reader PDF Widget Object Use-After-Free Vulnerability" [00000002-0002-0002-0002-000000013593]

Details
Public

This reporting is the normal behavior for devices that are very busy. In this example, the error "Regular Expression exceeded engine time limit (100000)" indicates that filter 13593 has exceeded the allocated time for inspection. It could be that the filter may be misbehaving or it is stuck in processing. The second line indicates that because of the delay, filter "13593: HTTP: Adobe Reader PDF Widget Object Use-After-Free Vulnerability" has been temporarily disabled by the IPS. To reset the filter to your configuration setting, redistribute a profile, or DV update, the filter will no longer be disabled.

 

What is Adaptive Filtering Configuration?

Adaptive Filtering Configuration (AFC) automatically manages your device under extreme load conditions. The device can be configured to protect against the potential adverse effects of a defective filter. On rare occurrences, the system may experience extreme load conditions that may cause the device to enter High Availability due to traffic congestion caused by filter failure.

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000087302
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.