Which mechanism should be used to write an IPS rule that focuses on the client or server side of a TCP communication?
Which Sourcefire feature allows you to send traffic directly through the device without inspecting it?