A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and there
Posted: Fri Aug 26, 2022 9:58 am
A System Administrator needs to create a pcap capture file which contains the FTP traffic inspected by the XGS and therefore has enabled the FTP_Get signature in the Default IPS Object.Which other action needs to be performed to ensure that the desired capture file is available in the Local Management interface (LMI) for this event only?
A. Select "Log With Raw" on the FTP_Get signature that was enabled.
B. Configure "Capture Connection" on the Response tab for the Default IPS Object.
C. Enable the tools>capture>pinterface from the command line filtering by FTP_Get event.
D. Configure "Capture Connection" on the Response tab for an IPS Event Filter Policy rule for FTP_Get event.
A. Select "Log With Raw" on the FTP_Get signature that was enabled.
B. Configure "Capture Connection" on the Response tab for the Default IPS Object.
C. Enable the tools>capture>pinterface from the command line filtering by FTP_Get event.
D. Configure "Capture Connection" on the Response tab for an IPS Event Filter Policy rule for FTP_Get event.