- CheckMates
- :
- Products
- :
- Quantum
- :
- Management
- :
- Packet mode search and inline layer rules
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Packet mode search and inline layer rules
Packet mode search through a security policy searches as if a packet is travelling through it. With inline layer rules it becomes more interesting. This examples shows a match on an inline layer rule that should have not been matched as far as I know.
Example from lab: Packet mode search string:
mode:Packet src:"HP-desktop" dst:any app:TeamViewer action:Accept
Result:
We see here a match on rule 156.2 but the source HP-desktop is not part of the network group that is used as source in rule 156. Therefore it should not have gone further down to rule 156.2 and matched on any. Is this a known limitation with packet mode search and inline layers?
- Labels:
-
SmartConsole
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, you are correct. We are working to fix this issue. We will update here once a target version has its fix.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, you are correct. We are working to fix this issue. We will update here once a target version has its fix.
Hi Tomer,
I hope everything is well with you.
Do you know if this issue has been fixed?
If so, do you know which target version has the fix ?
Thank you Tomer.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I hope everything is well with you.
Do you know if this issue has been fixed?
If so, do you know which target version has the fix ?
Thank you Tomer.
