Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?
A) the directional operator in the rule header
B) the "flow" rule option
C) specification of the source and destination ports in the rule header
D) The detection engine evaluates all sides of a TCP communication regardless of the rule options.

Question

Quizplus · Accepted Answer

The "flow" rule option in an IPS rule specifies the direction of traffic (to client or to server) and helps focus the rule on either the client or server side of a TCP communication.

Which Mechanism Should Be Used to Write an IPS Rule