ADM rule reference material This appendix includes material that can assist you when adding ADM rules to the Policy Editor. ADM rules syntax The ADM rules are very similar to C expressions. ADM rule term types All terms in an ADM rule have a specific type. ADM rule metric references Here are lists of metric references for ADM rule expressions, which are available on the Expression Component page when you are adding an ADM rule. Protocol-specific properties In addition to providing properties that are common across most protocols, ADM also provides protocol-specific properties that can be used with ADM rules. All protocol-specific properties are also available in the Expression Component page when adding an ADM rule. Protocol anomalies Beyond the common properties and protocol-specific properties, ADM also detects hundreds of anomalies in low-level, transport, and application protocols. All protocol anomaly properties are of type Boolean and are available in the Expression Component page when you are adding an ADM rule. ADM dictionary examples The ADM engine can match object content or any other metric or property with a single column dictionary for true or false (exists in the dictionary or does not exist in the dictionary).
ADM rule reference material This appendix includes material that can assist you when adding ADM rules to the Policy Editor. ADM rules syntax The ADM rules are very similar to C expressions. ADM rule term types All terms in an ADM rule have a specific type. ADM rule metric references Here are lists of metric references for ADM rule expressions, which are available on the Expression Component page when you are adding an ADM rule. Protocol-specific properties In addition to providing properties that are common across most protocols, ADM also provides protocol-specific properties that can be used with ADM rules. All protocol-specific properties are also available in the Expression Component page when adding an ADM rule. Protocol anomalies Beyond the common properties and protocol-specific properties, ADM also detects hundreds of anomalies in low-level, transport, and application protocols. All protocol anomaly properties are of type Boolean and are available in the Expression Component page when you are adding an ADM rule. ADM dictionary examples The ADM engine can match object content or any other metric or property with a single column dictionary for true or false (exists in the dictionary or does not exist in the dictionary).
