Invalid_blocked

[dwasserman]

What is in reports/network/Blocked sessions the "invalid blocker" concept?
Where and how can I manage it?

Thanks in advance

invalidblock.jpg

[jcoffin]

From a previous post from dmorris; "invalid blocked just means the packet was dropped because it was invalid (usually that it was not a part of any session)."

[dwasserman]

Can be a malware or bot call home symptom?
Honestly I'm somewhat bewildered about how to proceed with this

[jcoffin]

The post was too small to read to see if it was from external source. In general, if it is blocked I won't worry about it.

[dmorris]

Can be a malware or bot call home symptom?
Honestly I'm somewhat bewildered about how to proceed with this

Don't worry about it. It is entirely normal and happens all the time.
Thats why it isn't logged by default because while we should log it because it happened, its not particularly interesting or noteworthy and can often happen a lot.