About rupadras

rupadras · 12-06-2011

Cisco Systems is pleased to announce the availability of its 7.1(3) E4 service pack for Intrusion Prevention Systems (IPS). This release delivers new features and critical fixes. A subset of the new features includes extended support for Radius along...

rupadras · 08-10-2012

Hi,I replied in the other thread. Please try with header-regex instead of uri-regex, because the host name will appear in the HTTP header in the traffic.Also, we have sig 38686 detecting dropbox usage. Perhaps those are what you are looking for.

rupadras · 08-10-2012

Hi,Actually, "dropbox.com" will appear in the Hostname in the traffic, but in the custom signature, you are using uri-regex. If you change it to header-regex, it might work.Secondly, we have sig 38686 subsigs 0 and 1 to detect Dropbox usage. Subsig 0...

rupadras · 08-10-2012

yes, this looks like a typo. We will modify the description in an upcoming sigupdate. Thanks for bringing that to our attention.Radhika

rupadras · 06-25-2012

Hi,I suggest opening a TAC case. The TAC engineers would be able to go through the logs and better assist you here. thanks,Radhika

rupadras · 04-19-2012

Hi Ganesh,Say, in your example, if the strings Color and Green are separated by AAAA, you can write a regex as "ColorAAAAGreen". If you are not sure what characters can be between Color and Green, you can have a regex like "Color[\x00-\xff]*Green". T...

Member Since	‎11-08-2004 07:58 AM
Date Last Visited	‎11-04-2019 08:36 AM
Posts	45
Total Helpful Votes Received	29

User Statistics

User Activity

7.1(3) E4 Service Pack for Cisco IPS Now Available

IPS Custom Signature - .torrent - Possible?

IPS - Custom Signature url Alert

Signature 3250/0 - TCP Hijack

7.1(3) E4 Service Pack for Cisco IPS Now Available

IPS Regex for Boolean "AND"