A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and therefore has enabled the FTP_Get signature in the Default IPS Object.Which other action needs to be performed to ensure that the desired capture file is available in the Local Management interface (LMI) for this event only?
A. Select "Log With Raw" on the FTP_Get signature that was enabled.
B. Configure "Capture Connection" on the Response tab for the Default IPS Object.
C. Enable the tools>capture>pinterface from the command line filtering by FTP_Get event.
D. Configure "Capture Connection" on the Response tab for an IPS Event Filter Policy rule for FTP_Get event.
A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and there
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and there
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!