Summary
Reputation service running TOS v3.6.2 and earlier have a deffect.
Details
Product Bulletin #: 1046
Subject: Reputation services on IPS devices running TOS v3.6.2 and earlier
Product Bulletin Date: March 6, 2015
Summary: When using Reputation with IPS devices running TOS v3.6.2 and earlier, a defect exists which can cause the IPS to enter L2FB if a reputation DNS entry has a domain name label greater than 63 characters. Customers running the affected TOS versions and experience this issue will see their device entering L2FB and the following system log entry:
<CRIT> [ASS] tHttps7: dps/include/dps/common/ipReputation.h: 143: Assertion 'labelLength <= DNS_REP_MAX_LABEL_LEN' failed
Affected Products
Recommended Action: This issue is resolved in a later version of software, which prevents Reputation DNS entries with labels greater than 63 characters. If you have experienced this issue, please reboot your device and upgrade to a non-impacted version of TOS. Once the TOS has successfully been upgraded, perform a full sync on the SMS reputation database.
If you have concerns or further questions regarding this issue, contact the Trend Micro™ TippingPoint Technical Assistance Center (TAC).
Thank you,
Trend Micro™ TippingPoint
For updated contact information, please click here.
Subject: Reputation services on IPS devices running TOS v3.6.2 and earlier
Product Bulletin Date: March 6, 2015
Summary: When using Reputation with IPS devices running TOS v3.6.2 and earlier, a defect exists which can cause the IPS to enter L2FB if a reputation DNS entry has a domain name label greater than 63 characters. Customers running the affected TOS versions and experience this issue will see their device entering L2FB and the following system log entry:
<CRIT> [ASS] tHttps7: dps/include/dps/common/ipReputation.h: 143: Assertion 'labelLength <= DNS_REP_MAX_LABEL_LEN' failed
Affected Products
Part Number | Description | Affected TOS Version | Recommended TOS Version |
JC184A | S10 | TOS v3.6.2 and earlier | v3.6.4 |
JC186A | S110 | ||
JC187A | S330 | ||
JC019A | S660N | TOS v3.6.2 and earlier | v3.8.0 |
JC020A | S1400N | ||
JC021A | S2500N | ||
JC022A | S5100N | ||
JC577A | S6100N | ||
JC874A | S2600NX | ||
JC824A | S5200NX | ||
JC873A | S6200NX | ||
JC644A | S7100NX | ||
JC872A | S7500NX |
Recommended Action: This issue is resolved in a later version of software, which prevents Reputation DNS entries with labels greater than 63 characters. If you have experienced this issue, please reboot your device and upgrade to a non-impacted version of TOS. Once the TOS has successfully been upgraded, perform a full sync on the SMS reputation database.
If you have concerns or further questions regarding this issue, contact the Trend Micro™ TippingPoint Technical Assistance Center (TAC).
Thank you,
Trend Micro™ TippingPoint
For updated contact information, please click here.
© Copyright 2018 Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro logo, TippingPoint, the TippingPoint logo, and Digital Vaccine are trademarks or registered trademarks of Trend Micro Incorporated. TippingPoint Reg. U.S. Pat. & Tm. Off. The information is provided "as is" without warranty of any kind and is subject to change without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying such products and services. nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial errors or omissions contained herein. |