Filtering P2P programs by IPS sensor

Answered Question
Jun 17th, 2008
User Badges:

Hi,


I tried to stop P2P programs by enabling all signatures of P2P. some programs were stopped like Kaza but may other programs like lime-wire and others were still working. I tried to modify the signatures to add ports of regex to it but I couldn't find any information about this programs. can any one help me with that issue.


Thanks.

Correct Answer by Farrukh Haroon about 9 years 1 week ago

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.


show run all regex (for the ASA)


Regards


Farrukh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Farrukh Haroon Tue, 06/17/2008 - 17:48
User Badges:
  • Red, 2250 points or more

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.


show run all regex (for the ASA)


Regards


Farrukh

Actions

This Discussion