TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

Hi,

Open your RealSecure policy on the console with notepad and scroll to the
bottom, look for this field:

[\template\protocols\];
ftp     =S      21;
telnet  =S      23;
smtp    =S      25;
http    =S      80;
pop     =S      109-110;
nntp    =S      119;
imap    =S      143 220;


You can add 8080 to the http    =S      80; field as such:

http    =S      80 8080;

Save the policy in notepad and then reapply it to your network sensor.
RealSecure will now look at port 8080 for HTTP events (if you don't use port
80 for HTTP then you can remove that also).

Cheers,

Brian Fitch
Systems Engineer
Internet Security Systems, Inc.

-----Original Message-----
From: Jennifer Cefejam [mailto:[EMAIL PROTECTED]]
Sent: Friday, November 30, 2001 4:05 AM
To: [EMAIL PROTECTED]
Subject: RS 6 and Proxy traffic



TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------

Hello everybody,

I'd like to monitorize port 8080 traffic instead of port 80 HTTP
traffic with Network Sensor. Anybody knows if in this case would be possible

to detect the same events of the normal port 80 HTTP traffic, for example 
HTTP_DotDot or HTTP_IIS_xxxxx?

Any help would be welcome.

rgds from Spain

Jennifer Cefejam


_________________________________________________________________
Descargue GRATUITAMENTE MSN Explorer en http://explorer.msn.es/intl.asp




Reply via email to