Quote:
| Originally Posted by Huisje I'm more interested in understanding what is causing it than a fix though. |
Stateful Inspection checks executed as defined in the $FWDIR/lib/dcerpc.def file. Or packets that contain DCERPC data (continuation packets that do not start a new datagram) may begin with a sequence that is too similar to the beginning of a DCERPC Alter Context packet, and be considered invalid.
To resolve Active Directory Replication traffic failure and eliminate packets that contain DCERPC data from being considerd "Alter Context", modify the dcerpc.def file on the SmartCenter Server.