I need to add a policy that looks into the data portion of the packet and searches a specific string. This is useful for blocking packets with known virus (e.g. MSN hole/exploit a few weeks ago).
Does anyone know how to do this in Checkpoint Firewall-1 (mine's running on Solaris 7)? Does it require using the Inspect language?
Does anyone know how to do this in Checkpoint Firewall-1 (mine's running on Solaris 7)? Does it require using the Inspect language?