| Message Code | PIX-5-415005 |
| Severity | Notification |
| Description | Internal_Sig_Id Content type does not match specified type - Action Content Verification Failed from source_address to Dst_IP_Address |
| Explanation | This message is issued when the http-map content-type-verification command is configured and a mime type in the content-type HTTP header field is found in the list of policies of allowed types but the “magic number” in the body of the message is not the correct magic number to identify a file of that type. This message is rate limited which means that later violations are not logged. Internal_Sig_Id— This an internal “policy number” that can be used by developers to identify the specific policy that triggered the alert. Action— This can contain either: “Reset -” or “Drop -” depending upon the user-configured action. If the action is “log” then the null string """" is passed. source_address— The source address of the packet in which the content type verification failure was detected. Dst_IP_Address— The destination address of the packet in which the content type verification failure was detected. |
| User Action | The content of a message in the body of the message did not match the content type in the header of the message. This is unusual and could indicate an attempt to smuggle contraband data over the connection. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.