Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[ISSForum] order of policy execution
From: Shimon Silberschlag (shimonsbll.co.il)
Date: Wed Aug 27 2003 - 08:08:55 CDT
Can someone pls describe the order by which a policy is matched to the
actual network packets?
What is done first - packet filters, event filters or something else?
Is the match "first match" or "best match"?
I'm trying to create a policy that will trigger on any connection other than
selected few (HTTP etc.) and for these selected few will do a through IDS
analysis. Have someone figured out how to do this kind of setup?
NS v7 & WGM v6.7
ISSForum mailing list
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo