Standard - D-Link DFL-260E Reference Manual

Network security firewall application control signatures netdefendos

Hide thumbs Also See for DFL-260E:

Table of Contents

Chapter 24: Standard

• High Entropy, page 311

• Statistical Protocol IDentification, page 311

24.1. High Entropy

High Entropy is a virtual protocol used to detect potentially encrypted payloads. Important note:

the classification of this layer is effective since the 4.18.0 version of the ixEngine framework. The

classification is based on two methods: entropy value computation, and printable strings

detection. This concerns only unknown sessions over tcp and udp.

24.2. Statistical Protocol IDentification

SPID (Statistical Protocol IDentification) is a statistical classification engine, used to identify

encrypted or obfuscated streams from advanced Peer-to-peer or VPN protocols (ex: BitTorrent

RC4 streams).

Chapters

Table of Contents

Dfl-2560 Dfl-2560g Dfl-870 Dfl-1660 Dfl-860e