Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Filtering based on MS RPC UUID

    General pfSense Questions
    3
    3
    564
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      harmandeep last edited by

      Hi
      Is is it possible to filter RPC traffic using endpoints/services UUID?
      This is available in commercial solutions from Checkpoint and Juniper.
      Also check this https://community.mcafee.com/ideas/1488

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        Not that I'm aware of. Might be able to match it with snort (or better yet, Suricata inline on pfSense 2.3)

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • MikeV7896
          MikeV7896 last edited by

          I would think Snort would be able to catch it with OpenAppID… but I'm far from an expert in Snort.

          The S in IOT stands for Security

          1 Reply Last reply Reply Quote 0
          • First post
            Last post