cancel
Showing results for 
Search instead for 
Did you mean: 

event: ip filter session timeout

Checking my audit logs on a problem rule I saw this event" event: ip filter session timeout    I goggled it, scanned the sidewinder manual for this error. I have found nothing.

2 Replies
sliedl
Level 14
Report Inappropriate Content
Message 2 of 3

Re: event: ip filter session timeout

Every session through the firewall has a timeout value.  If no data is sent on that session for a certain amount of time the session is closed and it's audited as an 'IP filter session timeout.'

Highlighted

Re: event: ip filter session timeout

So I think the solution to this one was making my own filter on port 22 and not using the ssh proxy.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator