Summary
This article discusses test filters created by Trend Micro TippingPoint.
Details
The Trend Micro TippingPoint Digital Vaccine (DV) contains two special filters that have been specifically designed with testing in mind. These special filters are designed to fire when a specific string of random text passes through the IPS which in turn will test the security infrastructure. The test filters in question are:
6551: TCP: IPS Test Filter
8268: UDP: IPS Test Filter
The string chosen for the test is below. Please note this string has been chopped in half to avoid inadvertently firing this filter, you must remove the white space in the middle of this string before sending it through the device. After removing all white space, the resulting string should be 96 bytes in length. Please direct the TCP stream to a destination port other than port 80.
h53y0zG5x:Z7ygdX#zzh2xO;A4XHdwVG5OysSp 6mjsn pYLQnEMZqJMipFjYS#6JkSmXR2:2chYFalNGxjF1n:9JDGdIPxP7
6551: TCP: IPS Test Filter
8268: UDP: IPS Test Filter
The string chosen for the test is below. Please note this string has been chopped in half to avoid inadvertently firing this filter, you must remove the white space in the middle of this string before sending it through the device. After removing all white space, the resulting string should be 96 bytes in length. Please direct the TCP stream to a destination port other than port 80.
h53y0zG5x:Z7ygdX#zzh2xO;A4XHdwVG5OysSp 6mjsn pYLQnEMZqJMipFjYS#6JkSmXR2:2chYFalNGxjF1n:9JDGdIPxP7