alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - ℹ Stormshield SNS Firewall 🧱"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; ja3.hash; content:"e119ca9b121b9e59a4a6c8610f14e61a"; fast_pattern; tls_sni; content:"-sns.stormshieldcs.eu"; nocase; endswith; reference:url,https://www.stormshield.com/products-services/products/network-security/; metadata:created_at 2023_04_09 updated_at 2023_04_15; sid:3300740; rev:5; classtype:misc-activity;)