Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - pp25

Pages1
#1
Intrusion Detection and Prevention / Re: IPS not dropping eicar test file when https
March 01, 2025, 11:02:45 PM
This website might be helpful for testing https://eicar-test.kusivchi.space/.
It allows to download Eicar file selecting HTTP or HTTPS explicitly.
You can also try IPv4 and IPv6.
#2
Intrusion Detection and Prevention / Re: Does IPS support IPV6
March 01, 2025, 10:57:12 PM
Quote from: ngr2001 on January 08, 2025, 09:07:34 PMI just created a new PS routine to download an EICAR file and this time the blocked traffic appeared in the logs as IPV6. So I guess some rules for sure support IPV6, I'm just really surprised that no other rules are firing for IPV6 at the moment. I posted PS routine elsewhere but I might as well share the testing process below, I guess its useful for both testing IPS mode and IPV6 :)

You can test IPv4 or IPv6 explicitly downloading Eicar file from this web site: https://eicar-test.kusivchi.space/
It also allows to choose HTTP or HTTPS in case you'd like to check TLS decryption.
Pages1