Aic Mime Define Content Type Signatures - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Configuring Signatures
Table 7-1
Signature ID
12700
12701
12702
12703
12704
12705
12706
12707
12708
12709
12710
12711
12712

AIC MIME Define Content Type Signatures

There are two policies associated with MIME types:
•
•
Table 7-2
predefined content type you need. For the procedure for enabling signatures, see
of Signatures, page
see
Table 7-2
Signature ID
12621
12622 2
12623 0
12623 1
12623 2
12624 0
12624 1
12624 2
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
7-16
Request Method Signatures (continued)
Define Request Method
Define Request Method UNEDIT
Define Request Method SAVE
Define Request Method LOCK
Define Request Method UNLOCK
Define Request Method REVLABEL
Define Request Method REVLOG
Define Request Method REVADD
Define Request Method REVNUM
Define Request Method SETATTRIBUTE
Define Request Method GETATTRIBUTENAME
Define Request Method GETPROPERTIES
Define Request Method STARTENV
Define Request Method STOPREV
Define content type—Associates specific actions for the following cases (define-content-type):
Deny a specific MIME type, such as an image/jpeg
–
Message size violation
–
MIME-type mentioned in header and body do not match
–
Recognized content type (recognized-content-type)
lists the predefined define content type signatures. Enable the signatures that have the
7-10. You can also create custom define content type signatures. For the procedure,
Example AIC MIME-Type Signature, page
Define Content Type Signatures
Signature Description
Content Type image/gif Invalid Message Length
Content Type image/png Verification Failed
Content Type image/tiff Header Check
Content Type image/tiff Invalid Message Length
Content Type image/tiff Verification Failed
Content Type image/x-3ds Header Check
Content Type image/x-3ds Invalid Message Length
Content Type image/x-3ds Verification Failed
7-36.
Chapter 7 Defining Signatures
Configuring the Status
78-16527-01