Question
IPS signatures for traffic towards the outside
Hi,
I'm trying to figure out what the best generic ips signatures might be to add for traffic going to the outside. I was thinking maybe of signatures like Generic.DNS.tunnel.detection.variant.A or similar ...
Anyone have any ideas on which ones might be the best?
Thanks
