Example
To ignore all FTP traffic, both data packets (port 20) and control packets (port 21) whether the port
is the source or destination (any), you would add the following settings to the Port Settings tab.
Protocol Settings Tab
Use the Protocol Settings tab to tell the sensor to ignore traffic related to specific protocols,
identified by number.
The following table lists common protocols and their associated values. The original source for
this information was http://www.iana.org.
Table 2-2 Protocol Numbers
Number
1
2
3
4
6
8
9
17
45
46
47
53
55
57
88
94
115
Protocol
Description
ICMP
Internet Control Message [RFC792]
IGMP
Internet Group Management [RFC1112]
GGP
Gateway-to-Gateway [RFC823]
IP
IP in IP (encapsulation) [RFC2003]
TCP
Transport Control Protocol
EGP
Exterior Gateway Protocol [RFC888,DLM1]
IGP
any private interior gateway [IANA]
UDP
User Datagram [RFC768,JBP]
IDRP
Inter-Domain Routing Protocol [Sue Hares]
RSVP
Reservation Protocol [Bob Braden]
GRE
General Routing Encapsulation [Tony Li]
SWIPE
IP with Encryption [JI6]
MOBILE
IP Mobility [Perkins]
SKIP
SKIP [Markson]
EIGRP
EIGRP [CISCO,GXS]
IPIP
IP-within-IP Encapsulation Protocol [JI6]
L2TP
Layer Two Tunneling Protocol [Aboba]
Configuring the Application Filter Module
Creating Network Sensor Policies and Signatures 2-11
Need help?
Do you have a question about the Intrusion Prevention System and is the answer not in the manual?