Logical conditions in custom IPS signatures

Hello.

I need some help with logical conditions in custom IPS signatures definitions.

I've made a set of custom IPS signatures for browser identification based on user agent strings. the were working ok, but recently MS decided that IE will not include

net.tcp context identifier

HI all,

Been trying to build a custom app-id for an application which the PA currently recognizes as net.tcp.

- tried different patterns with no success.

- currently using the unknow-tcp-req-paylod as the context identifier.

- tried a plain text pattern

Packet capture for specific ip like signature match

Hi,

I have configured DNS sinkhole feature. The sinkholing is working fine with providing and blocking fake ip. The only problem is that although I can get the original client ip connecting to the fake ip, I cannot find the payload (url/resource being

Why is XP Detection Signature not consistantly tripping?

Hello,

We have created a custom vulnerability signature to detect XP devices based on identifying the user agent string as described in  Custom vulnerability signature for identifying Windows XP clients .   The issue we are encountering is that the si

Baidu applications

Baidu as a very famous applications which is very annoying to user?

why don't you have APP-ID' for its applications like pc faster, antivirus, browser

could you please add his apps to the APP-ID engine?

Appreciated.

Maher