From: Shimon Silberschlag (shimonsbll.co.il)
Date: Wed Aug 27 2003 - 08:08:55 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello Group,

Can someone pls describe the order by which a policy is matched to the
actual network packets?
What is done first - packet filters, event filters or something else?
Is the match "first match" or "best match"?

I'm trying to create a policy that will trigger on any connection other than
selected few (HTTP etc.) and for these selected few will do a through IDS
analysis. Have someone figured out how to do this kind of setup?

NS v7 & WGM v6.7

TIA,

Shimon Silberschlag

+972-3-9351572
+972-51-207130

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]