Filtering based on MS RPC UUID

[harmandeep]

Hi
Is is it possible to filter RPC traffic using endpoints/services UUID?
This is available in commercial solutions from Checkpoint and Juniper.
Also check this https://community.mcafee.com/ideas/1488

[jimp]

Not that I'm aware of. Might be able to match it with snort (or better yet, Suricata inline on pfSense 2.3)

[virgiliomi]

I would think Snort would be able to catch it with OpenAppID… but I'm far from an expert in Snort.