4.
Expand Finger Analysis in the Protocol column.
5.
Finger analysis is enabled by default. To disable it, click disable in the Property column, then
select yes from the drop-down list in the Value column.
6.
Verbose mode is disabled by default. When enabled, the sensor will log events when certain
evasions occur. To enable it, click verbose in the Property column, then select yes from the
drop-down list in the Value column.
7.
The sensor looks at traffic traveling in any direction on the well-known port 79. To edit the
existing port 79 configuration, select that row in the table and click Edit Port. The Add Port
Information dialog box is displayed.
8.
To add or exclude a port or port range for analysis, click Add Port. The Add Port Information
dialog box is displayed.
a.
Select the type of port to add or exclude, then enter the port number or low and high
numbers for a range. Refer to
Table 2-1
on page 2-8 for a list of common port numbers.
Creating Network Sensor Policies and Signatures 2-57
Configuring the Protocol Analysis Module
Need help?
Do you have a question about the Intrusion Prevention System and is the answer not in the manual?