IDP Whitelist for one IP

KITNIT
KITNIT Posts: 5
First Comment
in Security
Hey,

i have a site-to-site vpn between a USG60 and a ATP500. Everything works fine, except one small issue.

In one LAN behind the ATP500 is our Exchange Server. ScanToMail with our printers out of all LANs behind the ATP500 works. If i try ScanToMail from the LAN behind the USG60 it gets blocked by the IDP Filter of the ATP500:
"SSI=N [type=Sig(111118)] Ipswitch IMail Server SMTP Service Buffer-Overflow Action: Reject Receiver Severity: high"
As a workaround i whitelisted the Sig111118 in the IDP Settings. Is it possible to whitelist the Signature just for the IP of the ScanToMail printers and not in general?

Thanks for your help!

All Replies

  • jasailafan
    jasailafan Posts: 193  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    I guess it's IDP signature problem. Got a similar issue recently that sending email is blocked by IDP Sig 111118: Ipswitch IMail Server SMTP Service Buffer-Overflow. Already reported the issue to zyxel support. Waiting for their update.
  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    We are aware of IDP signature issue and we are investigating it.

    Untitled Image

    See how you've made an impact in Zyxel Community this year!
    https://bit.ly/Your2024Moments_Community

  • Mario
    Mario Posts: 106  Ally Member
    Zyxel Certified Network Engineer Level 1 - Security First Comment Friend Collector Fifth Anniversary
    edited June 2021
    I'm also affected by this signature problem...

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
    The false positive for IDP Sig 111118: Ipswitch IMail Server SMTP Service Buffer-Overflow will be fixed in the latest IDP signature version 4.0.0.20210611.0 and 4.0.1.20210611.0.
    You can update IDP to this version and check if the issue is resolved.   

    Untitled Image

    See how you've made an impact in Zyxel Community this year!
    https://bit.ly/Your2024Moments_Community

  • Ghalan
    Ghalan Posts: 1  Freshman Member
    First Comment Third Anniversary
    Hello,

    We had the same issue this week
    force update of IDP signature solves the issue.
    new version date is : 2021-06-11 03:10:00 (UTC+01:00)

    FYI : Default schedule for IDP Signature auto update is once a week (Sunday 1am)

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）