IPS filter on Policy ID with multiple protocols
Hi
I have following question
Lets assume we have a firewall policy permitting Windows Active Directory Traffic (which resulst various TCP, UDP protocols).
Ifr for example I create an IPS filter containning these protocols , when requests reach firewall all traffic will be inspected by IPS filter for any protocols , OR
example : if it is DNS traffic, only DNS replated IPS signatures will scan packets ?
Example: One IPS filter for DNS + LDAP, + NTP +ICMP
if for example I ping an IP address , by maching rule with this IPS filter, packet will be inspected for all protocols above or ICMP only ???
Thanks
