My initial goal was to find a rule easy to trigger in order to verify that the IPS installation is working properly. "QC" sort of thing... Created a site for triggering this rule: testips.x10host.com/mfplat.dll that contains a dll file with garbage in it. Nothing bad. Well, the file gets downloaded even though the balanced ruleset should block it. Rule 37262. Does anyone have similar tests to check out other rules ?
Thanks!