Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Filtering based on MS RPC UUID

    Scheduled Pinned Locked Moved General pfSense Questions
    3 Posts 3 Posters 889 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      harmandeep
      last edited by

      Hi
      Is is it possible to filter RPC traffic using endpoints/services UUID?
      This is available in commercial solutions from Checkpoint and Juniper.
      Also check this https://community.mcafee.com/ideas/1488

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Not that I'm aware of. Might be able to match it with snort (or better yet, Suricata inline on pfSense 2.3)

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • MikeV7896M
          MikeV7896
          last edited by

          I would think Snort would be able to catch it with OpenAppID… but I'm far from an expert in Snort.

          The S in IOT stands for Security

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.