You wish to know how wildcards can be used in DCS/SCSP IPS policies.
An asterisk (*) can be used as a wildcard, but it will only match a filename or a single directory rather than a full path. To match a full path, multiple asterisks seperated by backslashes(\) are required.
For example, the path "C:\temp\mybatch.bat" can be represented by the following sequence:
Be aware that use of wildcards in IPS policies carries the risk of potential subversion of security controls. The most secure configuration is to use the full path at all times in the policy.
Imported Document ID: TECH226644
Subscribing will provide email updates when this Article is updated. Login is required.