I have been practicing on matching strings for *eg kamran Kamran kAMRAN etc *... now, one of my colleague asked me what if there is a software *[eg. hotspotshield ] *which tunnel thru HTTP port and still make it to the outside world,can IPS see into it... i believe i can !!! :)
While seeing posts on OSL , i think there is a setting in in *Miscellanous Settings in IPS * where we have to turn on *AIC HTTP* engine to *"Yes" *and also i can see if i search with name, there is a built-in signature which i checkd thru IDM [something ..like *sigid: 12674* , and the SDN link is: https://intellishield.cisco.com/security/alertmanager/ipsSignature?signatureId=12674&signatureSubId=0 (you need CCO login to see it ) , ....................................................... My question is "How can I attach this signature 12674 to work with my Custom Signature" ...... Can I add the built-in signature to it as sub-signature ? Is thre any example on the web ..... Plz any quick guidance would be very helpful. regards, Kamran.
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
