alert tcp $HOME_NET 1024: -> $EXTERNAL_NET 1024: (msg:"ET POLICY Possible HTTP-TUNNEL to External Proxy for Anonymous Access"; flow:established,to_server; content:"GET /login/FetchProtocolVersion2.htm"; depth:36; classtype:policy-violation; threshold:type limit, track by_src,count 5, seconds 30; sid:2008842; rev:2;)
Added 2008-12-03 18:00:23 UTC
alert tcp $HOME_NET 1024: -> $EXTERNAL_NET 1024: (msg:"ET POLICY Possible HTTP-TUNNEL to External Proxy for Anonymous Access"; flow:established,to_server; content:"GET /login/FetchProtocolVersion2.htm"; depth:36; classtype:policy-violation; threshold:type limit, track by_src,count 5, seconds 30; sid:2008842; rev:2;)
Added 2008-12-03 18:00:23 UTC
alert tcp $HOME_NET 1024: -> $EXTERNAL_NET 1024: (msg:"ET POLICY Possible HTTP-TUNNEL to External Proxy for Anonymous Access"; content:"GET /login/FetchProtocolVersion2.htm"; depth:36; classtype:policy-violation; threshold:type limit, track by_src,count 5, seconds 30; sid:2008842; rev:1;)
Added 2008-12-03 17:49:56 UTC