alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY Cnet App Download and Checkin"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"/v"; content:"/?v="; content:"&c="; pcre:"/\/v\d\.\d\.\d/"; pcre:"/\/\?v=\d/"; classtype:misc-activity; sid:2013888; rev:7; metadata:attack_target Client_Endpoint, created_at 2011_11_08, deployment Perimeter, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_05_16;)