If you select ICMP in the Protocol field, enter the appropriate ICMP type in the Source
Port field.
•
Destination IP Address (CIDR): Enter a specific destination IP address or network and
mask that you want to ignore using the following format:
<IP address>/<mask>
Select the appropriate IP version checkbox. Network masks can range from 0-32 for IPv4
and 0-128 for IPv6. An IP address of 0.0.0.0 for IPv4 or :: for IPv6 can be used to represent
any IP address.
•
Destination Port: Enter the number of a specific destination port to ignore. Port numbers
can range from 1 to 65535. Enter 0 to specify any port. Refer to
list of common port numbers.
If you select ICMP in the Protocol field, enter the appropriate ICMP code in the
Destination Port field.
•
Protocol: Select the protocol to ignore from the drop-down list. Refer to
page 2-11 for a list of common protocol numbers. Use a 0 as a wildcard for any protocol.
Configuring the Application Filter Module
Table 2-1
Creating Network Sensor Policies and Signatures 2-17
on page 2-8 for a
Table 2-2
on
Need help?
Do you have a question about the Intrusion Prevention System and is the answer not in the manual?