Filtering P2P programs by IPS sensor

Answered Question
Jun 17th, 2008

Hi,

I tried to stop P2P programs by enabling all signatures of P2P. some programs were stopped like Kaza but may other programs like lime-wire and others were still working. I tried to modify the signatures to add ports of regex to it but I couldn't find any information about this programs. can any one help me with that issue.

Thanks.

I have this problem too.
0 votes
Correct Answer by Farrukh Haroon about 8 years 5 months ago

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.

show run all regex (for the ASA)

Regards

Farrukh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Farrukh Haroon Tue, 06/17/2008 - 17:48

You could get some help from the regex built-in the ASA firewall and try to add them in IPS. Also looking at the signature definitions of the open source snort IPS might also help.

show run all regex (for the ASA)

Regards

Farrukh

Actions

This Discussion