DefensePro User Guide
Security Configuration
Document ID: RDWR-DP-V0602_UG1201
159
The following table describes the Content types that you can configure the device to examine as part
of the attack signature.
Content Data Encoding Application Security can search for data in languages other than English,
for case-sensitive or case-insensitive data, and hexadecimal strings.
Values:
•
Not Applicable
•
Case Insensitive
•
Case Sensitive
•
HEX
•
International
Default: Not Applicable
Note:
The value of this field corresponds to the Content Type
parameter.
Content Data
The content type for the content search.
Values:
•
HTTP Header—The value of the HTTP Header. The header is defined
by the Content field.
•
Cookie—The cookie value. The cookie is defined by the Content field.
•
FTP Command—The FTP command arguments. The FTP command is
defined by the Content field.
Distance Range
A range that defines the allowable distance between two content
characters. When the distance exceeds the specified range, it is
recognized as an attack.
Regular Expression
Content
Specifies whether the Content Data field value is formatted as a regular
expression (and not as free text to search). You can set a regex search for
all content types.
Regular Expression
Content Data
Specifies whether the Content Data value is formatted as a regular
expression (and not as free text to search).
Table 81: Content Types
Content Type
Description
Cookie
HTTP cookie field. The Content field includes the cookie name, and the
Content Data field includes the cookie value.
DCE-RPC
Distributed Computing Environment/Remote Procedure Calls.
File Type
The requested file type in the HTTP GET command (JPG, EXE, and so on).
FTP Command
Parses FTP commands to commands and arguments, while normalizing
FTP packets and stripping Telnet opcodes.
FTP Content
Scans data transmitted using FTP, normalizes FTP packets and strips
Telnet opcodes.
Header Field
HTTP Header field. The Content field includes the header field name, and
the Content Data field includes the field value.
Host Name
In the HTTP header.
HTTP Reply Data
The data of the HTTP reply. This is available only in devices with an SME.
Parameter
Description
Summary of Contents for DefensePro 6.02
Page 1: ...DefensePro User Guide Software Version 6 02 Document ID RDWR DP V0602_UG1201 January 2012 ...
Page 2: ...DefensePro User Guide 2 Document ID RDWR DP V0602_UG1201 ...
Page 20: ...DefensePro User Guide 20 Document ID RDWR DP V0602_UG1201 ...
Page 28: ...DefensePro User Guide Table of Contents 28 Document ID RDWR DP V0602_UG1201 ...
Page 116: ...DefensePro User Guide Device Network Configuration 116 Document ID RDWR DP V0602_UG1201 ...
Page 302: ...DefensePro User Guide Real Time Security Reporting 302 Document ID RDWR DP V0602_UG1201 ...
Page 308: ...DefensePro User Guide Administering DefensePro 308 Document ID RDWR DP V0602_UG1201 ...
Page 324: ...DefensePro User Guide Troubleshooting 324 Document ID RDWR DP V0602_UG1201 ...
