""ET POLICY Windows-Based OpenSSL Tunnel Outbound""

SID: 2012078

Revision: 5

Class Type: policy-violation

Metadata: created_at 2010_12_22, updated_at 2011_04_11

Reference:

• Link

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: established

Contents:

• Value: "|16 03 00|"

• Value: "|00 5c|"

• Value: "|c0 14 c0 0a 00 39 00 38 00 88 00 87 c0 0f c0 05 00 35 00 84 c0 12 c0 08 00 16 00 13 c0 0d c0 03 00 0a c0 13 c0 09 00 33 00 32 00 9a 00 99 00 45 00 44 c0 0e c0 04 00 2f 00 96 00 41 00 07 c0 11 c0 07 c0 0c c0 02 00 05 00 04 00 15 00 12 00 09 00 14 00 11 00 08 00 06 00 03 00 ff|"

Within:

PCRE:

Special Options:

source