About KiCheon.Lee

Hello My customer think all w.generic virus signarues would have false-positive. So he want to make a virus profile excepted all w.generic signatures. Can it be made? Thanks. ... View more

Hello, I have seen the below link and I have known FW can not decode Sliverlight about filename. Filenames of Hotmail Email Attachments do not Appear in the Data Filtering Logs So I want to know all kinds list which FW can decode for filename. Please let me know it. Thank you KC Lee ... View more

Hello, I am doing performance test with Breaking Point about throughput , CPS. While testing, I have found drop counters as below. session_dup_pkt_drop                     701        3 drop      session   resource  Duplicate packet: Applies only for multi-DP plat form with hardware (Tiger) broadcasting pkt to all DPs What does this mean??? KC Lee ... View more

Hello, My customer made vulnerability signature in FW. But FW doesn't detect this signature. Customer Vulnerability Signature context : http-req-message-body pattern : eval\(gzinflate\(str_rot13\(base64_decode I am searching this but I don't know. So I need your assistance for it. I have read Creating_Custom_Signatures-RevA.pdf document   This document describe as the following message. http-req-message-body Description: Body content of a HTTP request when the body content cannot be recognized as URL encoded or MIME type data using the Content-type field. Do you know to relate between not detecting signature and this description?? Thanks ... View more

Hello, My customer made vulnerability signature in FW. But FW doesn't detect this signature. Customer Vulnerability Signature context : http-req-message-body pattern : eval\(gzinflate\(str_rot13\(base64_decode I am searching this but I don't know. So I need your assistance for it. I have read Creating_Custom_Signatures-RevA.pdf document    This document describe as the following message. http-req-message-body Description: Body content of a HTTP request when the body content cannot be recognized as URL encoded or MIME type data using the Content-type field. Do you know to relate between not detecting signature and this description?? Thanks ... View more

Hello, I am creating custom application. I have been faced a problem. There are two URL below, http://live.sports.media.daum.net/cast/baseball/relay?game_id=71014605#text http://live.sports.media.daum.net/cast/baseball/relay?game_id=71014605#hdvod Both are baseball streaming-service. But one is text base streaming-service. The another is video base streaming-service. My customer want to allow text base streaming and block video base streaming. Can I create two custom application to identify http fragment(#text , #hdvod)? Thanks and Regards, KC Lee ... View more