Kaseya affected by intrusion prevention rule

[Big D]

Disabling this rule.

#8734: WEB-PHP Pajax arbitrary command execution attempt.

Issue described by other engineers is slow access and timeout issues when accessing Kaseya and navigating the menu options. (machine agent connections to the server don't appear affected)

Believe another post mentioned this rule affecting some webmail portals and web interfaces as well.

[sky-knight]

I've had a programmer buddy of mine (RegEx makes my head hurt) look at the regex that is in that rule.

It seems to me to be a bit over broad. A lot like the SOCK5 rule in the protocol control module.

I think Dirk mentioned in a future release that rule was going to default to pass, to prevent these issues.