Filtering based on MS RPC UUID
-
Hi
Is is it possible to filter RPC traffic using endpoints/services UUID?
This is available in commercial solutions from Checkpoint and Juniper.
Also check this https://community.mcafee.com/ideas/1488 -
Not that I'm aware of. Might be able to match it with snort (or better yet, Suricata inline on pfSense 2.3)
-
I would think Snort would be able to catch it with OpenAppID… but I'm far from an expert in Snort.