Sagan medium stable other

[ADTRAN] TCP INTERNAL BLOCK

[ADTRAN] TCP INTERNAL BLOCK

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[ADTRAN] TCP INTERNAL BLOCK"; content: "Access Policy"; content: "tcp"; default_proto: tcp; program: FIREWALL; normalize; classtype: bad-unknown; sid:5001126; rev:4;)

Field Validations

Loading…

Comments (0)

Loading comments...