JNCIE-SEC

Practice session

You are deploying IDP on an SRX and need to create a custom attack signature for a proprietary application that uses TCP port 8443. The attack pattern involves the string 'EXPLOIT' appearing within the first 256 bytes of the TCP payload, followed by a null byte within the same flow direction. Which IDP custom attack configuration captures this pattern?

Loading your practice session…