""ET TFTP Outbound TFTP Data Transfer with Cisco config""

SID: 2015857

Revision: 5

Class Type: policy-violation

Metadata: created_at 2012_11_01, updated_at 2017_07_19

Reference:

Protocol: udp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 69

Flow:

Contents:

  • Value: "|00 03|" Depth: 2

  • Value: "|0a 21 20|version|20|"

Within: 12

PCRE:

Special Options:

source