Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Hola VPN Activity - X-Hola-* Headers"; flow:established,to_server; threshold:type limit,track by_src,seconds 300,count 1; http.header; content:"|0d 0a|X-Hola-"; classtype:policy-violation; sid:2021886; rev:3; metadata:created_at 2015_10_02, confidence High, signature_severity Informational, updated_at 2020_06_02;)