Can't reach a web page when IPS mode is enabled

[thalin]

Hi,

I have enabled Intrusion detection with a few rules. If I enable IPS mode my browser can't reach the site http://seb.se/ (A Swedish bank). I don't get any alerts of denial. I have not  seen this issue with any other web site. How can I debug this issue?

[phoenix]

Are you able to reach that site when you disable the IPS service? If you can I'd suggest you look at the specific rules you've enabled that's most likely blocking the site. Is there really nothing in the log files? Are you actually blocking using IPS or just alerting?

[thalin]

If Intrusion Detection is enabled but Prevention is off (that is only alert no blocking) it works. But I still do not get any alert. Are the any log files that I should look at by login in with ssh?

[thalin]

If I wait long enough Chrome gives the error ERR_CONNECTION_RESET.