Which type of signature engine is best suited for creating custom signatures that inspect data at OSI Layer 5 and above?
Which option is best to use to capture only a subset of traffic off the switch backplane and copy it to the Cisco IPS appliance?