Rule History

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET POLICY External Connection to Altiris HelpDesk"; flow:established,to_server; http.uri; content:"/aexhd/worker/"; nocase; reference:url,www.symantec.com/business/theme.jsp?themeid=altiris; classtype:misc-activity; sid:2009696; rev:4; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2024_03_10;)