Packet search protocols are a form of generic packet inspection capability used by IPS experts when dealing with protocols that are not specifically supported by Trellix IPS. They are generally used for implementing detection on specific ports in an efficient fashion. In these cases, it can be valuable to separate out traffic running on particular ports for processing. This can make detection more efficient because pattern matches and other tests will only examine a limited subset of network traffic. In addition, it is possible to create a packet search protocol to exclude certain traffic from being considered for detection.
Packet search protocols
- Published on Oct 5, 2026
- 1 minute(s) read
Was this article helpful?