Sunday, 25 January 2015

fw123test v1.2 released

fw123test v1.2 is released. Announcement blog post with most important improvements:
http://www.networksea.com/2015/01/fw123test-v1-2-is-released/

fw123test main product page:
http://www.networksea.com/fw123test/

For further news and blogs, please update your bookmarks to point to:
http://www.networksea.com/
Posted by Milan Mesic at 08:47 0 comments

We have moved to networkSEA.com !!

We have permanently moved to http://www.networksea.com/
Visit us!
www.networkSEA.com
Posted by Milan Mesic at 01:09 0 comments

Friday, 25 January 2013

Authorization failed or unapplied for client

If you have Authorization failed or unapplied for client or Authorization failed for client (depending of the model and SW on the switch), together with Authentication result overridden for client, and immediately after that Authorization succeeded for client , although it says that it succeeded, and in ISE Operations Monitoring for Authentications everything is green, you could still have an issue. On some switches you will have: 
*Mar  1 00:48:03.340: %AUTHMGR-5-FAIL: Authorization failed or unapplied for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4
*Mar  1 00:48:03.349: %DOT1X-5-RESULT_OVERRIDE: Authentication result overridden for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4
*Mar  1 00:48:04.582: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4
On others: 
Jan 01 18:17:06.928: %AUTHMGR-5-FAIL: Authorization failed for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4
Jan 01 18:17:06.936: %DOT1X-5-RESULT_OVERRIDE: Authentication result overridden for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4
Jan 01 18:17:07.716: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (0014.e223.ad54) 
on Interface Fa0/12 AuditSessionID 0DF3D9B40111000D00F12AD4

Switch#show authentication sessions interface f0/12
            Interface:  FastEthernet0/12
          MAC Address:  0014.e223.ad54
           IP Address:  10.10.10.10
            User-Name:  DOMAIN\user01
               Status:  Authz Failed
               Domain:  DATA
      Security Policy:  Should Secure
      Security Status:  Unsecure
       Oper host mode:  multi-auth
     Oper control dir:  both
        Authorized By:  Authentication Server
          Vlan Policy:  N/A
      Session timeout:  N/A
         Idle timeout:  N/A
    Common Session ID:  0DF3D9B40111000D00F12AD4
      Acct Session ID:  0x0000002D
               Handle:  0x8C000035

Runnable methods list:
       Method   State
       dot1x    Authc Success
So you actually have Authc Success, but Status: Authz Failed And also ACL is not applied, and show ip access-lists interface returns nothing: 
Switch#show ip access-lists interface F0/12
Switch#
Probable reason is issue with DACL (downloadable access list), web authentication or some other part of authorization profile. You should first check DACL, especially if it is in any way more complicated. Here are examples of DACLs that are fine and how they will be transformed when pushed to the switch:
DACL entry on ISE: 
permit tcp any any
on switch will be translated to: 
permit tcp host 10.10.10.10 any (15 matches)

DACL entry on ISE: 
permit tcp any any eq 22 established
on switch will be translated to: 
permit tcp host 10.10.10.10 any eq 22 established

DACL entry on ISE: 
permit tcp any eq 22 any established
on switch will be translated to: 
permit tcp host 10.10.10.10 eq 22 any established
Posted by Milan Mesic at 06:54 3 comments
Labels: , , , ,

Upgrade ASA to 8.4 - The following 'nat' command didn't have a matching 'global' rule on interface and was not migrated - ASA 8.4 (and 8.3) migration

In most cases following warning/error when upgrading to ASA software 8.3 or 8.4 are just informational, and everything went fine. Although you get: NAT migration logs: 
The following 'nat' command didn't have a matching 'global' rule on interface 'dmz' and was not migrated.
nat (inside) 1 10.10.10.113 255.255.255.255
And in pre-8.3 configuration you have: NAT migration logs: 
global (outside) 1 172.16.1.1 netmask 255.255.255.0
nat (inside) 1 10.10.10.113 255.255.255.255
nat (inside) 1 10.10.10.114 255.255.255.255
nat (inside) 1 10.10.10.115 255.255.255.255
nat (inside) 1 10.10.10.122 255.255.255.255
nat (inside) 1 10.10.10.123 255.255.255.255
nat (inside) 1 10.10.10.124 255.255.255.255
You actually get following entries in 8.3+: NAT migration logs: 
object network obj-10.10.10.113-01
 nat (inside,outside) dynamic 172.16.1.1
object network obj-10.10.10.114-01
 nat (inside,outside) dynamic 172.16.1.1
object network obj-10.10.10.115-01
 nat (inside,outside) dynamic 172.16.1.1
object network obj-10.10.10.122-01
 nat (inside,outside) dynamic 172.16.1.1
object network obj-10.10.10.123-01
 nat (inside,outside) dynamic 172.16.1.1
object network obj-10.10.10.124-01
 nat (inside,outside) dynamic 172.16.1.1
So NAT configuration was successfully migrated, and error/warning only means that you didn't have global statement for dmz interface, and only this part of NAT configuration was not migrated. inside-outside part was migrated, and everything is fine.
Posted by Milan Mesic at 06:52 0 comments
Labels: , , ,

Wednesday, 16 January 2013

IBM ISS IPS Proventia Security Events with Tuning Parameters ranges and default values

All security Events, parameter names, default values and ranges are listed as they were at 2013-01-15, and will be periodically update. Still, this is not something that is changed that often, so it will probably be useful for you!

ARJ_Long_FileName_Detected
pam.content.arj.maxfilename
Default Value: 400
Maximum Value: 65535
Minimum Value: 0
Type: number


ASP_IIS_HTMLEncode
pam.html.asp.parse.enable
Default Value: true
Type: Boolean


Adobe_Flash_Player_SetNALUnit_Exec
pam.quicktime.set.nal.unit.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 8
Type: number


AntiSniff_DNS_Test
pam.flood.antisniffdns.limit
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.antisniffdns.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.antisniffdns.size
Default Value: 1
Maximum Value: 1048576
Minimum Value: 1
Type: number


BitTorrent_DHT_AnnouncePeer
pam.parser.BitTorrentDHT.enabled
Default Value: true
Type: Boolean


BitTorrent_DHT_FindNode
pam.parser.BitTorrentDHT.enabled
Default Value: true
Type: Boolean


BitTorrent_DHT_GetPeers
pam.parser.BitTorrentDHT.enabled
Default Value: true
Type: Boolean


BitTorrent_DHT_Ping
pam.parser.BitTorrentDHT.enabled
Default Value: true
Type: Boolean


BrightStor_BackupAgent_Overflow
pam.brightstor.agent.bo
Default Value: 3166
Maximum Value: 4294967295
Minimum Value: 700
Type: number


CA_License_Server_Command_Overflow
pam.ca_licsvr.cmd.size
Default Value: 256
Maximum Value: 65535
Minimum Value: 1
Type: number


CA_License_Server_Request_Bo
pam.ca_licsvr.options.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.ca_licsvr.cmd.search.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 512
Type: number


CSS_IE_Flag_Code_Execution
pam.css.flag.strict
Default Value: false
Type: Boolean


CVS_Directory_Double_Free
pam.cvs.request.path.max
Default Value: 2048
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CVS_Request_Argument_Overflow
pam.cvs.request.argument.max
Default Value: 4096
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CVS_Request_EntryLine_Overflow
pam.cvs.request.entryline.max
Default Value: 4096
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.cvs.request.entryline.binary.max
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CVS_Request_Option_Overflow
pam.cvs.request.option.max
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CVS_Request_Path_Overflow
pam.cvs.request.path.max
Default Value: 2048
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CVS_Request_Tag_Overflow
pam.cvs.request.tag.max
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CiscoSccp_Invalid_MessageID
pam.cisco.sccp.message.last
Default Value: 0
Maximum Value: 4294967295
Minimum Value: 0
Type: number


CiscoSccp_Message_Overflow
pam.cisco.sccp.limit
Default Value: 1024
Maximum Value: 100000
Minimum Value: 4
Type: number


Cisco_CallMgrDB_DoS
pam.cisco.cmdb.length.limit
Default Value: 256
Maximum Value: 1000000
Minimum Value: 0
Type: number


Cisco_IOS_IPV4_DoS
pam.flood.cisco.iosipv4dos.ttl
Default Value: 4
Maximum Value: 254
Minimum Value: 1
Type: number

pam.flood.cisco.ios.ipv4dos.limit
Default Value: 10
Maximum Value: 200
Minimum Value: 0
Type: number


Cisco_IOS_OSPF_BO
pam.flood.cisco.ios.ospfbo.size
Default Value: 512
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.cisco.ios.ospfbo.limit
Default Value: 250
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.cisco.ios.ospfbo.interval
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


CoalescerStatistics
pam.statistics.interval
Default Value: 300
Maximum Value: 2592000
Minimum Value: 1
Type: number
Units: seconds


CoalescerStatistics_Cumulative
pam.statistics.interval
Default Value: 300
Maximum Value: 2592000
Minimum Value: 1
Type: number
Units: seconds


Conficker_P2P_Data_Transfer
pam.conficker_p2p.report.interval
Default Value: 30
Maximum Value: 1800
Minimum Value: -2147483648
Type: number

pam.parser.conficker.enabled
Default Value: true
Type: Boolean


Conficker_P2P_Detected
pam.conficker_p2p.report.interval
Default Value: 30
Maximum Value: 1800
Minimum Value: -2147483648
Type: number

pam.parser.conficker.enabled
Default Value: true
Type: Boolean


Conficker_P2P_Exec_Transfer
pam.conficker_p2p.report.interval
Default Value: 30
Maximum Value: 1800
Minimum Value: -2147483648
Type: number

pam.parser.conficker.enabled
Default Value: true
Type: Boolean


Conficker_P2P_Protection
pam.conficker_p2p.report.interval
Default Value: 30
Maximum Value: 1800
Minimum Value: -2147483648
Type: number

pam.parser.conficker.enabled
Default Value: true
Type: Boolean


Content_Analyzer_Credit_Card_Num
pam.ca.credit_card_num.regex
Default Value: [^-0-9.a-zA-Z]((((5[1-5]\d{2})|(6011)|(65\d{2}))[- .]?\d{4}[- .]?\d{4}[- .]?\d{4})|(4\d{3}[- .]?((\d{4}[- .]?\d{4})|(\d{5}))[- .]?\d{4})|(((3[68]\d{2})|(30[0-5]\d))[- .]?\d{6}[- .]?\d{4})|(3[47]\d{2}[- .]?\d{6}[- .]?\d{5}))[^-0-9.a-zA-Z]
Type: string

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.credit_card_num.validate
Default Value: true
Type: Boolean

pam.ca.credit_card_num.minmatch
Default Value: 10
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_Date
pam.ca.date.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.date.regex
Default Value: [^-0-9./]((([1][012]|0?[1-9])[-./]([3][01]|[12]\d|0?[1-9])[-./]([1-2]\d{3}|\d{2}))|(([3][01]|[12]\d|0?[1-9])[-./]([1][012]|0?[1-9])[-./]([1-2]\d{3}|\d{2})))[^-0-9./]
Type: string


Content_Analyzer_Dollar_Amount
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.dollar_amount.regex
Default Value: [¢$€ƒ££PR¥]\s*(((\d,?)*\d[,.]\d{2})|([,.]\d{2}))[^-0-9.]
Type: string

pam.ca.dollar_amount.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_Email_Addr
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.email_addr.regex
Default Value: [a-zA-Z0-9]@[A-Za-z0-9]([-.]?[a-zA-Z0-9])+\.[A-Za-z]{2,}[^.A-Za-z0-9]
Type: string

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.email_addr.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_Person_Name
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.person_name.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.person_name.regex
Default Value: ([A-Z][a-z]+,\s[A-Z][a-z]+\s[A-Z](\.)?\s)|((Sr\.?|Sig\.?|ret\.|Capt\.|Maj\.|Col\.|Rev\.?|Sir\.?|Mlles?\.|MM?\.|Mmes?\.|Mr\.?|Mrs\.?|Miss|Ms\.?|Dr\.?)\s[A-Z][-a-z'.])|([A-Z][a-z]+\s[A-Z]\.\s[A-Z][a-z])
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean


Content_Analyzer_Postal_Addr
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.postal_addr.regex
Default Value: ,\x20*(A[ELKSZRAP]|C[AOT]|D[EC]|F[LM]|G[AU]|HI|I[ADLN]|K[SY]|LA|M[ADEHINOPST]|N[CDEHJMVY]|O[HKR]|P[ARW]|RI|S[CD]|T[NX]|UT|V[AIT]|W[AIVY])\x20+\d{5}(-\d{4})?[^-0-9.]
Type: string

pam.ca.postal_addr.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_Social_Security_Num
pam.ca.social_security_num.minmatch
Default Value: 10
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.social_security_num.regex
Default Value: [^-0-9.](00[1-9]|0[1-9]\d|[1-6]\d{2}|7[0-6]\d|77[0-2])[- .]([1-9]0|0[1-9]|[1-9][1-9])[- .](\d{3}[1-9]|[1-9]\d{3}|\d[1-9]\d{2}|\d{2}[1-9]\d)[^-0-9.]
Type: string

pam.ca.report.packetinfo
Default Value: true
Type: Boolean


Content_Analyzer_US_Phone_Num
pam.ca.us_phone_num.regex
Default Value: [^-0-9.]((\(\d{3}\)\x20?)|(\d{3}-))?\d{3}-\d{4}[^-0-9.]
Type: string

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.us_phone_num.minmatch
Default Value: 100
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_User_Combined_0
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_comb_0.reportstr
Default Value: User Combined 0
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_0.events
Type: string


Content_Analyzer_User_Combined_1
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_comb_1.reportstr
Default Value: User Combined 1
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_1.events
Type: string


Content_Analyzer_User_Combined_2
pam.ca.user_comb_2.reportstr
Default Value: User Combined 2
Type: string

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_2.events
Type: string


Content_Analyzer_User_Combined_3
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_3.reportstr
Default Value: User Combined 3
Type: string

pam.ca.user_comb_3.events
Type: string


Content_Analyzer_User_Combined_4
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_comb_4.events
Type: string

pam.ca.user_comb_4.reportstr
Default Value: User Combined 4
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean


Content_Analyzer_User_Combined_5
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_comb_5.reportstr
Default Value: User Combined 5
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_5.events
Type: string


Content_Analyzer_User_Combined_6
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_comb_6.reportstr
Default Value: User Combined 6
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_6.events
Type: string


Content_Analyzer_User_Combined_7
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_comb_7.reportstr
Default Value: User Combined 7
Type: string

pam.ca.user_comb_7.events
Type: string


Content_Analyzer_User_Defined_0
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_def_0.regex
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_0.reportstr
Default Value: User Defined 0
Type: string

pam.ca.user_def_0.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_User_Defined_1
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_def_1.regex
Type: string

pam.ca.user_def_1.reportstr
Default Value: User Defined 1
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_1.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_User_Defined_2
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_def_2.reportstr
Default Value: User Defined 2
Type: string

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_2.regex
Type: string

pam.ca.user_def_2.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number


Content_Analyzer_User_Defined_3
pam.ca.user_def_3.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_3.regex
Type: string

pam.ca.user_def_3.reportstr
Default Value: User Defined 3
Type: string


Content_Analyzer_User_Defined_4
pam.ca.user_def_4.reportstr
Default Value: User Defined 4
Type: string

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_def_4.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_4.regex
Type: string


Content_Analyzer_User_Defined_5
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_5.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.user_def_5.regex
Type: string

pam.ca.user_def_5.reportstr
Default Value: User Defined 5
Type: string


Content_Analyzer_User_Defined_6
pam.ca.user_def_6.regex
Type: string

pam.ca.user_def_6.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.report.packetinfo
Default Value: true
Type: Boolean

pam.ca.user_def_6.reportstr
Default Value: User Defined 6
Type: string


Content_Analyzer_User_Defined_7
pam.ca.enabled
Default Value: false
Type: Boolean

pam.ca.user_def_7.regex
Type: string

pam.ca.user_def_7.minmatch
Default Value: 8
Maximum Value: 4000000000
Minimum Value: 1
Type: number

pam.ca.zip.uncompress.enable
Default Value: false
Type: Boolean

pam.ca.user_def_7.reportstr
Default Value: User Defined 7
Type: string

pam.ca.report.packetinfo
Default Value: true
Type: Boolean


Content_CMS_OpenSSL_Exec
pam.cms.trigger.without.indefinite.length
Default Value: false
Type: Boolean


Content_Incorrect_Extension
pam.http.report.content.incorrect.extension
Default Value: false
Type: Boolean


Cross_Site_Scripting
pam.injection.xss.suppression
Default Value: false
Type: Boolean

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


DB2_XMLQUERY_Overflow
pam.drda.xmlquery.threshold
Default Value: 264
Maximum Value: 2147483647
Minimum Value: 10
Type: number


DCOM_Large_Body_Extension
pam.dcom.extension.limit
Default Value: 65536
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DHCP_Format_String_BO
pam.dhcp.options.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DHCP_Hostname_Overflow
pam.dhcp.hostname.limit
Default Value: 253
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DHCP_Large_Option_Bo
pam.dhcp.options.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DHCP_Long_Discover_Message
pam.dhcp.discover.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DNS_Cache_Poison
pam.dns_cache_poison.question.limit
Default Value: 50
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.dns_cache_poison.age.limit
Default Value: 3
Maximum Value: 10
Minimum Value: -2147483648
Type: number

pam.dns_cache_poison.answer.limit
Default Value: 40
Maximum Value: 4294967295
Minimum Value: 2
Type: number

pam.dns_cache_poison.authoritative.only
Default Value: false
Type: Boolean


DNS_Cache_Poison_PortGuessing_Attack
pam.dns_cache_poison.age.limit
Default Value: 3
Maximum Value: 10
Minimum Value: -2147483648
Type: number

pam.dns_cache_poison.repeated.domain.limit
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 2
Type: number

pam.dns_cache_poison.repeated.domain.time
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.dns_cache_poison.subdomain.answer.limit
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 2
Type: number


DNS_Cache_Poison_Subdomain_Attack
pam.dns_cache_poison.age.limit
Default Value: 3
Maximum Value: 10
Minimum Value: -2147483648
Type: number

pam.dns_cache_poison.repeated.domain.limit
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 2
Type: number

pam.dns_cache_poison.repeated.domain.time
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.dns_cache_poison.subdomain.answer.limit
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 2
Type: number


DNS_Dot_Query
pam.dns_dot_query.report.interval
Default Value: 2
Maximum Value: 100000
Minimum Value: -2147483648
Type: number


DNS_Excessive_Requests
pam.dns.request.count
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.dns.request.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.dns.requestlimits
Default Value: false
Type: Boolean


DNS_Format_String
pam.dns.maxname
Default Value: 900
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DNS_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


DNS_Hostname_Overflow
pam.dns.maxname
Default Value: 900
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DNS_Malformed_Flood
pam.flood.dns.size
Default Value: 2048
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.dns.limit
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.dns.flood.protection
Default Value: false
Type: Boolean

pam.flood.dns.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


DNS_TCP_Port_Abuse
pam.dns.tcp.malformed.abuse.count
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 2
Type: number

pam.tcp.dns.ignore_syn_data
Default Value: true
Type: Boolean


DNS_Tunnel_Detected
pam.dns.tunnel.idle.timeout
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.dns.tunnel.detection.total
Default Value: 40
Maximum Value: 65535
Minimum Value: 5
Type: number

pam.dns.tunnel.detection.rate
Default Value: 4
Maximum Value: 65535
Minimum Value: 1
Type: number

pam.dns.tunnel.min.data.length
Default Value: 15
Maximum Value: 32767
Minimum Value: 0
Type: number

pam.dns.tunnel.report.interval
Default Value: 10
Maximum Value: 100000
Minimum Value: -2147483648
Type: number


DNS_Windows_SMTP_Overflow
pam.dns.answer.count
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


DataProtector_Opcode20_Exec
pam.data_protector.rootquery.limit
Default Value: 1023
Maximum Value: 65535
Minimum Value: 100
Type: number


DataProtector_Opcode27_Exec
pam.data_protector.opcode27.limit
Default Value: 254
Maximum Value: 65535
Minimum Value: 100
Type: number


DataProtector_Root_Query_Exec
pam.data_protector.rootquery.limit
Default Value: 1023
Maximum Value: 65535
Minimum Value: 100
Type: number


EMail_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


EOT_Compressed_OpenTypeFont_Detected
pam.parser.eot.enabled
Default Value: true
Type: Boolean


EOT_Data_Record_Heap_Overflow
pam.parser.eot.enabled
Default Value: true
Type: Boolean


EOT_Malformed_OpenTypeFont_Detected
pam.parser.eot.enabled
Default Value: true
Type: Boolean


EOT_OpenTypeFont_Detected
pam.parser.eot.enabled
Default Value: true
Type: Boolean


EPS_Long_Comment
pam.eps.comment.length.limit
Default Value: 1024
Maximum Value: 65535
Minimum Value: 0
Type: number


EarthAgent_ServerProtect_TMReg_Overflow
pam.trend_earthagent.tmregstring.limit
Default Value: 256
Maximum Value: 65535
Minimum Value: 1
Type: number


Echo_Reply_Without_Request
pam.icmp.noechorequest.interval
Default Value: 600
Maximum Value: 4294967295
Minimum Value: 0
Type: number
Units: seconds

pam.icmp.noechorequest.count
Default Value: 3
Maximum Value: 409
Minimum Value: 0
Type: number


Email_Auth_CramMd5_Overflow
pam.smtp.auth.crammd5.max
Default Value: 384
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Auth_Failed
pam.login.smtp.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.smtp.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Auth_Overflow
pam.smtp.auth.max
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Autonomy_KeyView_EML_Multiple_Bo
pam.mime.cumulativeheader.limit
Default Value: 3200
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Email_Autonomy_Kvdocve_Bo
pam.content.html.src.max
Default Value: 400
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Calendar_Code_Exec
pam.icalendar.property.binary.limit
Default Value: 64
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.icalendar.property.limit
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Email_Command_Overflow
pam.smtp.command.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Email_Error
pam.smtp.error.count
Default Value: 10
Maximum Value: 2000
Minimum Value: 1
Type: number

pam.smtp.error.interval
Default Value: 120
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_GoodTech_MultipleRcpt_Bo
pam.smtp.maxname
Default Value: 255
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Email_Helo_Overflow
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Mime_Filename_Overflow
pam.mime.filename.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Email_Name_Overflow
pam.smtp.maxname
Default Value: 255
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Email_Notes_Attribute_Overflow
pam.content.html.attribute.max
Default Value: 0x400
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Qmail_Rcpt
pam.smtp.qmail.maxrcpt
Default Value: 65535
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Email_Recipient_Overflow
pam.smtp.maxrcpt
Default Value: 1000
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Email_VCF_Mozilla_Overflow
pam.content.vcard.limit
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Email_Virus_Double_Extension
pam.filename.double_extension.require.spaces
Default Value: true
Type: Boolean


Email_Virus_Suspicious_Zip
pam.content.zip.uncompressed.min
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Email_Zip_Executable_Content
pam.content.zip.uncompressed.min
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.zip_executable.encrypted
Default Value: false
Type: Boolean


Encrypted_Session_Policy_Abuse
pam.encrypted_session.trigger_on_connect
Default Value: true
Type: Boolean


FAX_Coversheet_Shellcode_Detected
pam.faxcover.scan.limit
Default Value: 40000
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


FFF_KeyView_Foliosr_BO
pam.parser.fff.enabled
Default Value: true
Type: Boolean


FTP_Allo_Overflow
pam.ftp.allo.limit
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 3
Type: number


FTP_Append_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Auth_Failed
pam.login.ftp.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.ftp.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


FTP_Cisco_IOS_MKD_BO
pam.ftp.cisco.mkd.maxname
Default Value: 77
Maximum Value: 2147483647
Minimum Value: 32
Type: number


FTP_Cisco_IOS_Multiple_BO
pam.ftp.cisco.mkd.maxname
Default Value: 77
Maximum Value: 2147483647
Minimum Value: 32
Type: number


FTP_Commands_With_Binary
pam.ftp.cmd.binary.count
Default Value: 5
Maximum Value: 2147483647
Minimum Value: 1
Type: number

pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number

pam.ftp.cmd.count
Default Value: 3
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Cwd_Overflow
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Delete_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Filename_Overflow
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


FTP_Glob_Implementation
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_List_Long_Line
pam.ftp.list.maxline
Default Value: 1024
Maximum Value: 65535
Minimum Value: 1
Type: number


FTP_Login_Overflow
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_Mdtm_Very_Long
pam.ftp.mdtm.limit
Default Value: 478
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_Mkd_Overflow
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Mlst_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_NLST_Overflow
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Netware_Delete_Overflow
pam.ftp.netware.delete.maxname
Default Value: 114
Maximum Value: 2147483647
Minimum Value: 32
Type: number


FTP_Oracle_Pass_Overflow
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_PWD_Response_Overflow
pam.ftp.pwd.overflow.threshold
Default Value: 1023
Maximum Value: 65535
Minimum Value: 0
Type: number


FTP_Passive_Response_Very_Long
pam.ftp.pasv.overflow.threshold
Default Value: 60
Maximum Value: 65535
Minimum Value: 1
Type: number


FTP_Passive_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Password_Overflow
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_ProFTPD_Username_SQL_Injection
pam.ftp.allowanyserver
Default Value: false
Type: Boolean


FTP_Restart_LargeFile
pam.ftp.rest.limit
Default Value: 4096000000
Maximum Value: 4294967295
Minimum Value: 1000000
Type: number


FTP_Restart_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Retr_Very_Long
pam.ftp.retr.limit
Default Value: 478
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_Rmd_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Rnfr_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Rnto_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Size_Very_Long
pam.ftp.size.limit
Default Value: 478
Maximum Value: 4294967295
Minimum Value: 1
Type: number


FTP_Stat_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Stor_Very_Long
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


FTP_Unix_Passwd_File_Accessed
pam.passwd.lineskip.count
Default Value: 8
Maximum Value: 4294967295
Minimum Value: 0
Type: number


FTP_Virus_Suspicious_Zip
pam.content.zip.uncompressed.min
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number


FTP_WSFTP_Allo_BO
pam.ftp.allo.max
Default Value: 429496719
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Finger_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


Flac_Metadata_Block_BO
pam.parser.flac.enabled
Default Value: true
Type: Boolean


Flv_String_Overflow
pam.flv.string.max
Default Value: 0x3FFFFFFF
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HP_DP_Cell_Manager_DoS
pam.hp_dp_cellmgr.max.length
Default Value: 0xFFff
Maximum Value: 0xFFffFFff
Minimum Value: 0
Type: number


HSRP_Invalid_IPTTL
pam.hsrp.ipttl.threshold
Default Value: 3
Maximum Value: 255
Minimum Value: 0
Type: number


HSRP_Suspicious_Priority
pam.hsrp.priority.threshold
Default Value: 255
Maximum Value: 255
Minimum Value: 0
Type: number


HTML_AIM_URL_Overflow
pam.html.aim.url.limit
Default Value: 400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


HTML_Exploit_Fingerprint
pam.fingerprint.token.enabled
Default Value: true
Type: Boolean


HTML_File_URI_Overflow
pam.html.file.uri.limit
Default Value: 512
Maximum Value: 65535
Minimum Value: 0
Type: number


HTML_Hostname_Overflow
pam.html.hostname.limit
Default Value: 250
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTML_IRC_URL_Overflow
pam.html.irc.url.limit
Default Value: 800
Maximum Value: 2147483647
Minimum Value: 1
Type: number


HTML_Mshtml_Overflow
pam.html.mshtml.bo
Default Value: 1000
Maximum Value: 65535
Minimum Value: 2
Type: number


HTML_Net_Virtual_Method_Delegate
pam.html.net.table.tolerance
Default Value: 80
Maximum Value: 65535
Minimum Value: 0
Type: number


HTML_Object_Styles_Overflow
pam.html.object.styles.max
Default Value: 16
Maximum Value: 65535
Minimum Value: 1
Type: number


HTML_OnLoad_Very_Large
pam.html.body.onload.limit
Default Value: 2048
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTML_UTF8_Overflow
pam.html.utf8.bo
Default Value: 5
Maximum Value: 65535
Minimum Value: 1
Type: number


HTML_VML_Overflow
pam.html.vml.spt.limit
Default Value: 202
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.html.vml.fill.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_ACCEPT_Overflow
pam.http.maxaccept
Default Value: 1600
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Apache_Chunked_BO
pam.http.apache.bo.chunksize
Default Value: 0xE0000000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Apache_Expect_XSS
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_Apache_Header_Memory_DoS
pam.http.header.contspace.limit
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_Apache_ModUserDir_Disclosure
pam.moduser.interval
Default Value: 15
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.moduserdir.count
Default Value: 3
Maximum Value: 409
Minimum Value: 1
Type: number


HTTP_Apache_OnError_XSS
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_Apache_Struts2_Exec
pam.struts.any.server.type
Default Value: false
Type: Boolean


HTTP_Auth_Failed
pam.login.http.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.http.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


HTTP_Auth_TooLong
pam.http.maxauth
Default Value: 500
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_BrownOrifice
pam.content.jar.decompress
Default Value: false
Type: Boolean


HTTP_CRLF_Injection_Response_Splitting
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.argument.token.limit
Default Value: 8
Maximum Value: 100
Minimum Value: 0
Type: number

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_Chunked_Encoding_Overflow
pam.http.chunked.encoding.overflow
Default Value: 0x3FFFFFFF
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Connect_Overflow
pam.http.maxconnect
Default Value: 0x400
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Connection_Overflow
pam.http.maxconnectionfield
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: characters


HTTP_ContentDisposition_LongFile
pam.http.resp.filename.size
Default Value: 500
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Content_Type_Overflow
pam.http.maxtype
Default Value: 2000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Cross_Site_Scripting
pam.injection.xss.suppression
Default Value: false
Type: Boolean

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_DotDot
pam.http_dotdot.limit
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Field_With_Binary
pam.http.binary.count
Default Value: 20
Maximum Value: 65535
Minimum Value: 0
Type: number

pam.http.binary.fieldlength
Default Value: 100
Maximum Value: 65535
Minimum Value: 1
Type: number


HTTP_Fields_With_Binary
pam.http.binary.fieldcount
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 0
Type: number
Units: fields


HTTP_Forced_Browsing_Probe
pam.http.fbdetect.count
Default Value: 15
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.http.fbdetect.interval
Default Value: 20
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.fbdetect.ratio
Default Value: 20
Maximum Value: 100
Minimum Value: 0
Type: number

pam.http.forcedbrowsingdetect.enabled
Default Value: false
Type: Boolean


HTTP_GET_ComputeSum
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_CreateTable
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_DotDot_Data
pam.http_get_dotdot_data.limit
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_GET_GroupBy
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_Convert_Int
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_OpenRowSet
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_Select_Count
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_Select_Top_1
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_UnionAllSelect
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_UnionSelect
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_SQL_WaitForDelay
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GET_Very_Long
pam.http.maxget
Default Value: 4000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_GET_XP_Cmdshell
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_GETargscript
pam.injection.xss.suppression
Default Value: false
Type: Boolean

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


HTTP_GroupWise_AcceptLang_Overflow
pam.http.groupwise.serverport
Default Value: 8300
Maximum Value: 65535
Minimum Value: 1
Type: number


HTTP_GroupWise_Client_Overflow
pam.http.groupwise.serverport
Default Value: 8300
Maximum Value: 65535
Minimum Value: 1
Type: number


HTTP_Groupwise_WebAccess_GWinter_Bo
pam.http.max_novell_auth
Default Value: 366
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_HOST_Overflow
pam.http.maxhostname
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_HTML_Tag_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_Header_Request_Smuggle
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_Html_In_Ref
pam.injection.xss.suppression
Default Value: false
Type: Boolean

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_IE_IFrame_BO
pam.content.html.iframe.src.max
Default Value: 239
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.content.html.iframe.name.max
Default Value: 1999
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IE_InstallEngineCtl_Overflow
pam.http.ie.installenginectl.limit
Default Value: 128
Maximum Value: 1000000
Minimum Value: 0
Type: number


HTTP_IFRAME_Tag_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_IISHTR_Overflow
pam.http.maxname
Default Value: 1023
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_ASP_Chunked_Overflow
pam.iis-asp.chunksize
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.iis-asp.chunksize
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_ASP_WebResource_Fetch_Error
pam.http_reject.count
Default Value: 450
Maximum Value: 2000
Minimum Value: 100
Type: number

pam.http_reject.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 5
Type: number


HTTP_IIS_FPSE_Debug_Bo
pam.iis.fp30reg.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_Index_Server_Overflow
pam.http.iis.ida.threshold
Default Value: 230
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_MSSQL_XML_Script
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_IIS_MSSQL_xml
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_IIS_Media_Services
pam.http.nsiislog.chunksize
Default Value: 2000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_RSA_WebAgent_BO
pam.iis.rsa.limit
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_IIS_Request_Header_DoS
pam.http.iis_request_header_dos.anyserver.allow
Default Value: false
Type: Boolean


HTTP_IIS_Tilde_DoS
pam.http.iis_tilde_dos.anyserver.allow
Default Value: false
Type: Boolean


HTTP_Java
pam.content.jar.decompress
Default Value: false
Type: Boolean


HTTP_Large_Request_Content
pam.http.request.content.limit
Default Value: 24999999
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_Lighttpd_Header_Overflow
pam.http.lighttpd.hdr.limit
Default Value: 0x0000f000
Maximum Value: 0x7fffffff
Minimum Value: 0x200
Type: number


HTTP_Long_Header_Name
pam.http.header.name.limit
Default Value: 240
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_LotsOf_Byte_Ranges
pam.http.rangerequest.apacheonly
Default Value: true
Type: Boolean

pam.http.rangerequest.limit
Default Value: 100
Maximum Value: 65535
Minimum Value: 0
Type: number


HTTP_MCMS_CrossSiteScripting
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_MSIS_Script
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_MailEnable_Auth_Overflow
pam.http.auth.mailenable
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_MaxDB_WebDBM_Database_Overflow
pam.http.webdbm.maxdblen
Default Value: 64
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Mozilla_Domain_Name_Overflow
pam.http.mozilla.domainnamebo.limit
Default Value: 4
Maximum Value: 63
Minimum Value: 1
Type: number


HTTP_Nfuse_Script
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_OpenView_NNM_CgiArgs_Overflow
pam.nnm.cgiargs.limit
Default Value: 5120
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_OpenView_NNM_OvAlarm_Overflow
pam.nnm.ovalarm.language.limit
Default Value: 68
Maximum Value: 4096
Minimum Value: 16
Type: number


HTTP_OpenView_NNM_OvSessionMgr_Overflow
pam.nnm.sessionmgr.arg.limit
Default Value: 28
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Oracle_Weblogic_Connector_BO
pam.http.request.limit
Default Value: 4096
Maximum Value: 65535
Minimum Value: 0
Type: number


HTTP_Oracle_iSQL_Login_Overflow
pam.http.oracle.isql.login.limit
Default Value: 50
Maximum Value: 10000
Minimum Value: 0
Type: number


HTTP_PHP_Memory_Limit
pam.http.php.mem.hdr.limit
Default Value: 64
Maximum Value: 512
Minimum Value: 1
Type: number


HTTP_PHP_Script_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_PHP_TooMany_Parameters_Array_Overflow
pam.http.php.array_overflow.versioncheck
Default Value: false
Type: Boolean

pam.http.url_values.limit
Default Value: 1000
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


HTTP_POST_ComputeSum
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_CreateTable
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_GroupBy
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_Convert_Int
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_OpenRowSet
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_Select_Count
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_Select_Top_1
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_UnionAllSelect
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_UnionSelect
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_SQL_WaitForDelay
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_Script
pam.injection.xss.suppression
Default Value: false
Type: Boolean

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_POST_TooMany_Parameters_DoS
pam.http.post_values.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_POST_XP_Cmdshell
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_POST_repeated_char
pam.name.maxrepeatedchar
Default Value: 100
Maximum Value: 250
Minimum Value: 2
Type: number


HTTP_Parameter_Abuse
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_PhatBot_AgoBot
pam.http.phatbot.contentlength
Default Value: 256000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Proc_Self_Environ_Probe
pam.injection.procselfenviron.traversal.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_QuickTime_Java_Code_Exec
pam.content.jar.decompress
Default Value: false
Type: Boolean


HTTP_QuickTime_RTSP_Response_BO
pam.http.quicktime.response.limit
Default Value: 256
Maximum Value: 512
Minimum Value: 32
Type: number


HTTP_Quicktime_RTSP_Overflow
pam.content.rtsp.src.threshold
Default Value: 299
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Server_Side_Include_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


HTTP_Slowloris
pam.http.fragmented.request.limit
Default Value: 120
Maximum Value: 65535
Minimum Value: 0
Type: number

pam.http.slow.request.limit
Default Value: 40
Maximum Value: 65535
Minimum Value: 0
Type: number

pam.http.request.header.time.limit
Default Value: 20
Maximum Value: 65535
Minimum Value: 0
Type: number


HTTP_Squid_NTLM_Password_Bo
pam.http.squid.ntlm.password.limit
Default Value: 24
Maximum Value: 10000
Minimum Value: 0
Type: number


HTTP_Struts_CookieInterceptor_Exec
pam.struts.any.server.type
Default Value: false
Type: Boolean


HTTP_Sun_JRE_Malformed_GIF_BO
pam.content.jar.decompress
Default Value: false
Type: Boolean


HTTP_Swat_AuthBo
pam.http.swat.destport
Default Value: 901
Maximum Value: 65535
Minimum Value: 1
Type: number


HTTP_Twiki_Search_CmdExec
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_URL_Many_Slashes
pam.http.url.slashes
Default Value: 200
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_URL_Name_Very_Long
pam.http.maxname
Default Value: 1023
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_URL_Requests_Too_Often
pam.http.urllimit.count
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.urlcount.max
Default Value: 0
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.http.urllimit.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_URL_TooMany_Parameters_DoS
pam.http.url_values.limit
Default Value: 1000
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


HTTP_URL_repeated_char
pam.name.maxrepeatedchar
Default Value: 100
Maximum Value: 250
Minimum Value: 2
Type: number


HTTP_Unix_Passwd_File_Accessed
pam.passwd.lineskip.count
Default Value: 8
Maximum Value: 4294967295
Minimum Value: 0
Type: number


HTTP_UserAgent_Too_Long
pam.http.maxuseragent
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_WebDAV_Long_Rqst_BO
pam.http.webdavmaxurl
Default Value: 19000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_Web_App_Cmd_Exec
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean


HTTP_WhatsUpGold_Instance_Overflow
pam.http.whatsupgold.maxinstancelen
Default Value: 1200
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_eDirectory_Host_Overflow
pam.http.edirectory.serverport
Default Value: 8028
Maximum Value: 65535
Minimum Value: 1
Type: number


HTTP_lotsOfURLs
pam.http.urllimit.count
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.http.urllimit.enabled
Aliases: pam.http.urllimits
Default Value: false
Type: Boolean

pam.http.urllimit.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number


HTTP_repeated_character
pam.name.maxrepeatedchar
Default Value: 100
Maximum Value: 250
Minimum Value: 2
Type: number


Helix_DNA_LoadTestPassword_Overflow
pam.rtsp.testpassword.max
Default Value: 64
Maximum Value: 65535
Minimum Value: 8
Type: number


Helix_RealServer_Overflow
pam.rtsp.maxurl
Default Value: 512
Maximum Value: 65535
Minimum Value: 8
Type: number


Helix_Universal_Transport_Overflow
pam.rtsp.transport.max
Default Value: 512
Maximum Value: 65535
Minimum Value: 8
Type: number


ICC_Profile_Tag_Overflow
pam.icc.tagoverflow.threshold
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 0
Type: number


ICMP_Flood
pam.flood.icmp.limit
Aliases: pam.icmp.maxcnt
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.icmp.size
Default Value: 512
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.icmp.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


ICMP_TCP_MTU_DoS
pam.icmp.pmtud.threshold
Default Value: 82
Maximum Value: 4294967295
Minimum Value: 68
Type: number


ICMP_Unreachable_Storm
pam.icmp.unreachable.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.icmp.unreachable.count
Default Value: 50
Maximum Value: 2000
Minimum Value: 1
Type: number


IDENT_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


IIS_FTP_Session_Status_DoS
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


IMAP4_Very_Long_Command
pam.imap4.command.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Auth_Failed
pam.login.imap4.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.imap4.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


IMAP_CramMD5_Long_Username
pam.imap4.crammd5name.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


IMAP_Literal_Contents_Overflow
pam.imap4.literal.length
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Literal_Overflow
pam.imap4.literal.limit
Default Value: 0x3FFF
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Long_Mbox
pam.imap4.mailbox.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Long_Password
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


IMAP_Tag_Overflow
pam.imap4.tag.limit
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 0
Type: number


IMAP_Too_Many_Connects
pam.imap4.connection.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.imap4.connection.count
Default Value: 15
Maximum Value: 2000
Minimum Value: 1
Type: number


IM_File_Xfer_Double_Extension
pam.filename.double_extension.require.spaces
Default Value: true
Type: Boolean


IP_Unknown_Protocol
pam.ip.protocol.
Type: Boolean


IRC_Automated_Client
pam.irc.autoclient.limit
Default Value: 2
Maximum Value: 1048576
Minimum Value: 2
Type: number

pam.irc.autoclient.interval
Default Value: 5
Maximum Value: 1048576
Minimum Value: 2
Type: number


IRC_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


IRC_Rogue_Session
pam.irc.rogue.proxy.ignore
Default Value: false
Type: Boolean


ISAKMP_Brute_Force
pam.auth.ike.count
Default Value: 180
Maximum Value: 409
Minimum Value: 1
Type: number

pam.auth.ike.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


ISAKMP_Certificate_Request_Overflow
pam.isakmp.maxcertificatesize
Default Value: 2048
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Ident_Flood
pam.flood.ident.interval
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.ident.size
Default Value: 512
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.ident.limit
Default Value: 50
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Image_EMF_GDI_Filename_Overflow
pam.content.emf.description.threshold
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.content.emf.gdi.filename.threshold
Default Value: 260
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Image_EMF_Long_Description
pam.content.emf.description.threshold
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Image_GIF_CompressionError
pam.content.gif.codesize.threshold
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.content.gif.blocksize.threshold
Default Value: 12
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.content.gif.enabled
Default Value: true
Type: Boolean


Image_ICON_Malformed
pam.icon.image.limit
Default Value: 4096
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Image_JPEG_IE_Size_Overflow
pam.jfif.ie_size.threshold
Default Value: 0x10000000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Inflate_Utilization_Statistics
pam.content.zip.decompress
Default Value: false
Type: Boolean

pam.inflate.statistics.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 900
Type: number

pam.content.jar.decompress
Default Value: false
Type: Boolean

pam.content.wmz.decompress
Default Value: true
Type: Boolean


Informix_Long_Username_Overflow
pam.informix.long_username.threshold
Default Value: 960
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Informix_Username_Overflow
pam.informix.username.threshold
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Itunes_Playlist_Long_URL_Overflow
pam.pls.urlsize
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


JavaScript_ActiveXObject_Obfuscation
pam.javascript.activexObfuscate.split.limit
Default Value: 2
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


JavaScript_Double_Escaped_NOOP_Sled
pam.script.shellcode_noop.aggressive
Default Value: true
Type: Boolean

pam.script.shellcode_noop.aggressive
Default Value: true
Type: Boolean


JavaScript_Large_Eval
pam.javascript.unescape.limit
Default Value: 64
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


JavaScript_Large_FromCharCode
pam.javascript.fromcharcode.limit
Default Value: 64
Maximum Value: 4294967295
Minimum Value: 0
Type: number


JavaScript_Large_Unescape
pam.javascript.unescape.limit
Default Value: 64
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


JavaScript_Multiple_Unescape_Eval
pam.script.unescape.eval.limit
Default Value: 32
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


JavaScript_NOOP_Sled
pam.script.shellcode_noop.aggressive
Default Value: true
Type: Boolean


JavaScript_Shellcode_Detected
pam.script.shellcode_noop.aggressive
Default Value: true
Type: Boolean


JavaScript_Suspicious_Hex_String
pam.javascript.suspicious_hex_string.limit
Default Value: 512
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


JavaScript_Unescape_fromCharCode
pam.js_fromcharcode.multi_radix.required
Default Value: false
Type: Boolean


Java_Deserialization_Privilege_Escalation
pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Getsoundbank_Overflow
pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Malicious_Applet
pam.java.threat.threshold
Default Value: 4
Maximum Value: 15
Minimum Value: 0
Type: number

pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Possibly_Malicious_Applet
pam.java.threat.threshold
Default Value: 4
Maximum Value: 15
Minimum Value: 0
Type: number

pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Sandbox_Breach_Dos
pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Sandbox_Code_Execution
pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Scripting_Privilege_Escalation
pam.content.jar.decompress
Default Value: false
Type: Boolean


Java_Untrusted_Object_Execution
pam.content.jar.decompress
Default Value: false
Type: Boolean


Kerberos_Weak_Encryption
pam.kerberos.weak.encryption.3des
Default Value: false
Type: Boolean


LDAP_Auth_Failed
pam.login.ldap.count
Default Value: 5
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.ldap.interval
Default Value: 1800
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


LDAP_BER_Sequence_Dos
pam.ldap.badber.count
Default Value: 10
Maximum Value: 65535
Minimum Value: 1
Type: number


LDAP_Distinguished_Name_Overflow
pam.ldap.max.distinguished_name
Default Value: 1024
Maximum Value: 12288
Minimum Value: 1
Type: number


LDAP_Filter_Overflow
pam.ldap.max.filter
Default Value: 4096
Maximum Value: 12288
Minimum Value: 1
Type: number


LDAP_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


LDAP_Long_ASN1_Length
pam.ldap.asn1.length.limit
Default Value: 500000000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LDAP_Lotus_Domino_OctetString_Heap_Overflow
pam.ldap.addreq.limit
Default Value: 0xFFFFFFE0
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LDAP_Lotus_Domino_OctetString_Overflow
pam.ldap.lotus.string.limit
Default Value: 0xFFFF
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LDAP_Sun_Search_Dos
pam.ldap.max.distinguished_name
Default Value: 1024
Maximum Value: 12288
Minimum Value: 1
Type: number


LHA_File_Path_Overflow
pam.lha.file.path.limit
Default Value: 255
Maximum Value: 1000000
Minimum Value: 0
Type: number


LNK_MsWin_Code_Execution
pam.lnk.mswin_code_exec.local.enable
Default Value: false
Type: Boolean


LPD_Cachefsd_Overflow
pam.lpd.queue.length
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LPD_Delete_DotDot_Traversal
pam.lpd.delete.dotdot.limit
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.lpd.delete.dotdot.limit
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LPD_Novell_Iprint_Queuename_Overflow
pam.lpd.iprint.qlen
Default Value: 120
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LPD_SAP_Overflow
pam.lpd.sapbuf.length
Default Value: 450
Maximum Value: 4294967295
Minimum Value: 1
Type: number


LanMan_Share_Enum_Sweep
pam.lanman.shareenumsweep.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.lanman.shareenumsweep.count
Default Value: 5
Maximum Value: 409
Minimum Value: 1
Type: number
Units: seconds


M3U_Long_Filename_Overflow
pam.content.m3u.filename.max
Default Value: 350
Maximum Value: 4294967295
Minimum Value: 4
Type: number

pam.content.m3u.filename.binarycount
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 0
Type: number


M3U_UDP_Filename_Format_String
pam.m3u.filename.fmtspecifiers
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 1
Type: number


MGCP_LongField
pam.mgcp.maxvalue
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


MGCP_Long_Endpoint
pam.mgcp.maxendpoint
Default Value: 64
Maximum Value: 4294967295
Minimum Value: 0
Type: number


MGCP_Long_Tid
pam.mgcp.maxtid
Default Value: 16
Maximum Value: 4294967295
Minimum Value: 0
Type: number


MOV_Malicious_HREFTrack
pam.mov.mdat.id.scan
Default Value: 4096
Maximum Value: 0xFFFFFFFF
Minimum Value: 2
Type: number


MSRPC_LLS_Bo
pam.msrpc.llsrpc.limit2
Default Value: 450
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.msrpc.llsrpc.limit1
Default Value: 18
Maximum Value: 4294967295
Minimum Value: 0
Type: number


MSRPC_LSASS_Bo
pam.msrpc.lsass.limit
Default Value: 824
Maximum Value: 1000000
Minimum Value: 0
Type: number


MSRPC_MSMQ_Overflow
pam.msrpc.msmq.limit
Default Value: 100
Maximum Value: 2147483647
Minimum Value: 1
Type: number


MSRPC_Message_Que_Heap_BO
pam.msrpc.message-que-heap.limit
Default Value: 128
Maximum Value: 2147483647
Minimum Value: 1
Type: number


MSRPC_NetDDE_Bo
pam.msrpc.netdde.limit
Default Value: 256
Maximum Value: 1000000
Minimum Value: 0
Type: number


MSRPC_PlugAndPlay_GetDevList_DoS
pam.msrpc.upnp.devlist.limit
Default Value: 1024
Maximum Value: 65535
Minimum Value: 1
Type: number


MSRPC_Race_Heap_Overflow
pam.msrpc.heapdos.req.count
Default Value: 8
Maximum Value: 4294967295
Minimum Value: 1
Type: number


MSRPC_Registry_Request_DoS
pam.msrpc.reg.class.len.limit
Default Value: 512
Maximum Value: 65535
Minimum Value: 1
Type: number


MSRPC_RemoteActivate_Path_BO
pam.msrpc.isystemactivate-path.limit
Default Value: 261
Maximum Value: 261
Minimum Value: 1
Type: number


MSRPC_Share_Enum_Sweep
pam.msrpc.shareenumsweep.count
Default Value: 5
Maximum Value: 409
Minimum Value: 1
Type: number

pam.msrpc.shareenumsweep.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


MSRPC_Spoolss_GetDocPrinter_Exec
pam.msrpc.spoolss.getdocprinter.exeonly
Default Value: true
Type: Boolean


MSRPC_Spoolss_GetPrinterData_DoS
pam.msrpc.spoolss.getprinterdata.limit
Default Value: 128000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


MSRPC_Spoolss_Overflow
pam.msrpc.spoolss.limit
Default Value: 259
Maximum Value: 65535
Minimum Value: 1
Type: number


MS_Compressed_Folders_Overflow
pam.content.zip.filename.max
Default Value: 260
Maximum Value: 32766
Minimum Value: 0
Type: number


MS_Excel_XLSX_Parsing_Exec
pam.content.zip.decompress
Default Value: false
Type: Boolean


Malformed_Packet_Storm
pam.flood.badpacket.limit
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.badpacket.size
Default Value: 512
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.ip.protocol.
Type: Boolean

pam.flood.badpacket.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


McAfee_Ebiz_Packet_Code_Execution
pam.parser.McafeeEBiz.enabled
Default Value: true
Type: Boolean


Microsoft_Windows_Shell_Banner
pam.ms_shell_banner.ignore.telnet
Default Value: false
Type: Boolean


Mime_Autonomy_SDK_ContentType_Bo
pam.mime.contenttype.limit
Default Value: 139
Maximum Value: 4294967295
Minimum Value: 0
Type: number


MySQL_Brute_Force
pam.login.mysql.interval
Default Value: 60
Maximum Value: 65000
Minimum Value: 1
Type: number
Units: seconds

pam.login.mysql.count
Default Value: 100
Maximum Value: 2000
Minimum Value: 1
Type: number


MySQL_Change_User_Auth_Bypass
pam.mysql.change.user.fail.limit
Default Value: 5
Maximum Value: 1000000
Minimum Value: 0
Type: number


NDMP_Oracle_SecureBackup_Overflow
pam.ndmp.username.len
Default Value: 1872
Maximum Value: 4294967295
Minimum Value: 1
Type: number


NDMP_Veritas_BackupExec_Auth_Overflow
pam.ndmp.passwdlen
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 1
Type: number


NNTP_From_Overflow
pam.nntp.max.from
Default Value: 255
Maximum Value: 4294967295
Minimum Value: 1
Type: number


NTP_Mode7_DoS
pam.ntp.mode7.count
Default Value: 10
Maximum Value: 200
Minimum Value: 1
Type: number

pam.ntp.mode7.interval
Default Value: 20
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


NTP_Time
pam.sntp.drift.threshold
Default Value: 604800
Maximum Value: 4294967295
Minimum Value: 0
Type: number
Units: seconds


Nachi_Ping_Protection
pam.icmp.nachi.report.interval
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 30
Type: number

pam.icmp.nachi_ping_protection.relaxed
Default Value: false
Type: Boolean


Nachi_Ping_Sweep
pam.icmp.nachi.sleep
Default Value: 300
Maximum Value: 2147483647
Minimum Value: 0
Type: number


Netbios_Flood_DoS
pam.flood.netbios.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.netbios.size
Default Value: 2048
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.netbios.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


Netbios_Name_Scan
pam.dns.netbiosscan.interval
Default Value: 15
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.dns.netbiosscan.count
Default Value: 50
Maximum Value: 2000
Minimum Value: 1
Type: number


Network_Normal
pam.adapter.
Type: string

pam.traffic.sample.interval
Default Value: 60
Maximum Value: 86400
Minimum Value: 1
Type: number
Units: seconds

pam.traffic.sample
Default Value: false
Type: Boolean

pam.traffic.bucket.size
Aliases: pam.traffic.window.size
Default Value: 10
Maximum Value: 86400
Minimum Value: 1
Type: number
Units: seconds


Network_Quiet
pam.adapter.
Type: string

pam.traffic.sample.interval
Default Value: 60
Maximum Value: 86400
Minimum Value: 1
Type: number
Units: seconds

pam.traffic.sample
Default Value: false
Type: Boolean

pam.traffic.bucket.size
Aliases: pam.traffic.window.size
Default Value: 10
Maximum Value: 86400
Minimum Value: 1
Type: number
Units: seconds


OSPF_Database_Desc
pam.ospf.dbdesc.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Database_Desc_Multicast
pam.ospf.dbdesc.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Hello
pam.ospf.hello.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Hello_Multicast
pam.ospf.hello.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Link_State_Ack
pam.ospf.lsa.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Link_State_Ack_Multicast
pam.ospf.lsa.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Link_State_Update
pam.ospf.lsu.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Link_State_Update_Multicast
pam.ospf.lsu.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Lnk_State_Req
pam.ospf.lsr.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


OSPF_Lnk_State_Req_Multicast
pam.ospf.lsr.report.limit
Default Value: 86400
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Oracle_AQELM_Overflow
pam.tns.aqelm.limit
Default Value: 255
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Admin_SdoCodeSize_Bo
pam.tns.sdocodesize.limit
Default Value: 25
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Ctxsys_Drvdisp_Overflow
pam.tns.ctxsys.drvdisp.limit
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Oracle_Default_Username
pam.oracle.sysaccounts.ignore
Default Value: false
Type: Boolean


Oracle_DropSiteInstant_Bo
pam.tns.dropsiteinstant.limit
Default Value: 256
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_GenReplSupport_Bo
pam.tns.genreplsupport.limit
Default Value: 600
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Init_Stored_Procedure_Overflow
pam.tns.init.arg.limit
Default Value: 110
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_InstantiateOffline_Bo
pam.tns.instantiateonoffline.limit
Default Value: 256
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_InstantiateOnline_Bo
pam.tns.instantiateonoffline.limit
Default Value: 256
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_InterConvFuncts_Bo
pam.tns.interconvfuncts.limit
Default Value: 30
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Listener_Bo
pam.tns.cmd.limit
Default Value: 1000
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_LotsOf_Remote_Registration
pam.tns.registration.session.count
Default Value: 20
Maximum Value: 2000
Minimum Value: 1
Type: number

pam.tns.registration.session.interval
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 5
Type: number


Oracle_MD2_SdoCodeSize_Bo
pam.tns.sdocodesize.limit
Default Value: 25
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_MD2_ValidateGeom_Bo
pam.tns.validategeom.limit
Default Value: 25
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Olap_Table_Overflow
pam.tns.olap.table.limit
Default Value: 303
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Oracle_PitrigDrop_Overflow
pam.tns.pitrigdrop.limit
Default Value: 2337
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_PitrigTruncate_Overflow
pam.tns.pitrigtruncate.limit
Default Value: 1896
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_SnapInternal_Overflow
pam.tns.snapinternal.limit
Default Value: 46
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_TNS_Remote_Registration
pam.tns.registration.data.scan.start
Default Value: 200
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Oracle_ToChar_Bo
pam.tns.tochar.limit
Default Value: 128
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Too_Many_Useless_Sessions
pam.tns.useless.session.data.requests
Default Value: 2
Maximum Value: 10
Minimum Value: 0
Type: number

pam.tns.useless.session.data.responses
Default Value: 2
Maximum Value: 10
Minimum Value: 0
Type: number

pam.tns.useless.session.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 5
Type: number

pam.tns.useless.session.count
Default Value: 10
Maximum Value: 2000
Minimum Value: 1
Type: number


Oracle_TransformLayer_Overflow
pam.tns.transformlayer.limit
Default Value: 460
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_Username_Bo
pam.tns.username.limit
Default Value: 600
Maximum Value: 1000000
Minimum Value: 0
Type: number


Oracle_XMLSchema_Overflow
pam.tns.xmlschema.limit
Default Value: 64
Maximum Value: 1000000
Minimum Value: 0
Type: number


PAM_Configuration_Error
pam.report.config.error
Default Value: true
Type: Boolean


PDE_Renew_Host
pam.pde.host.renew.age
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.pde.enabled
Default Value: false
Type: Boolean

pam.pde.secret
Type: string

pam.pde.validate.time
Default Value: true
Type: Boolean

pam.pde.host.remove.age
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.pde.drop.auth.packet
Default Value: true
Type: Boolean


PDE_Unauthenticated_Host
pam.pde.unauth.report.interval
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.pde.whitelist
Type: string

pam.pde.enabled
Default Value: false
Type: Boolean

pam.pde.vpn.range
Type: string

pam.pde.host.remove.age
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.pde.max.hosts.allow
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


PDF_Deep_Nesting
pam.pdf.embedded.parse.depth
Default Value: 3
Maximum Value: 255
Minimum Value: 0
Type: number


PDF_Degenerate_Stream
pam.pdf.trust.length
Default Value: true
Type: Boolean


PDF_Embedded_PDF
pam.pdf.embedded.parse.depth
Default Value: 3
Maximum Value: 255
Minimum Value: 0
Type: number


PDF_FoxIt_Launch_Overflow
pam.pdf.launch.limit
Default Value: 511
Maximum Value: 65535
Minimum Value: 0
Type: number

pam.pdf.scan.limit
Default Value: 80000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


PDF_FoxIt_Title_Overflow
pam.pdf.scan.limit
Default Value: 80000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


PDF_Invalid_Stream_Length
pam.pdf.trust.length
Default Value: true
Type: Boolean


PDF_Swf_Detected
pam.pdf.swf.limit
Default Value: 1
Maximum Value: 65535
Minimum Value: 0
Type: number


PGM_Detected
pam.pgm.report.limit
Default Value: 600
Maximum Value: 2147483647
Minimum Value: 1
Type: number


POP3_Auth_Failed
pam.login.pop3.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.pop3.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


POP_APOP_Name_Overflow
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


POP_Filename_Overflow
pam.mime.filename.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


POP_Fold_Overflow
pam.pop.fold.threshold
Default Value: 128
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_Fuseware_Overflow
pam.pop.fuseware.threshold
Default Value: 1024
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


POP_List_Overflow
pam.pop.list.threshold
Default Value: 1000
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_QPopUser_Overflow
pam.pop.qpopuser.threshold
Default Value: 63
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_Response_Client_Bo
pam.pop.preresponse.max
Default Value: 128
Maximum Value: 4294967294
Minimum Value: 1
Type: number


POP_Retr_DoS
pam.pop.retr.threshold
Default Value: 11
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_SilentRunner_Pass_Overflow
pam.pop.silentrunner.pass.threshold
Default Value: 175
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_SilentRunner_User_Overflow
pam.pop.silentrunner.user.threshold
Default Value: 175
Maximum Value: 65535
Minimum Value: 0
Type: number


POP_Too_Many_Connects
pam.pop.connection.count
Default Value: 15
Maximum Value: 2000
Minimum Value: 1
Type: number

pam.pop.connection.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.pop.connection.serverresponse
Default Value: server ready
Type: string


POP_YPOPs_Overflow
pam.pop.yahoo.threshold
Default Value: 180
Maximum Value: 65535
Minimum Value: 0
Type: number


PPTP_Badmagic
pam.parser.pptp.enabled
Default Value: true
Type: Boolean


PPTP_PoPToP_Ctrl_Packet_BO
pam.parser.pptp.enabled
Default Value: true
Type: Boolean


Pict_UncompressedQuickTime_Underflow
pam.pict.uncompressedquicktime.min
Default Value: 0x33
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Ping_Flood
pam.icmp.pingflood.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 0
Type: number
Units: seconds

pam.icmp.pingflood.count
Default Value: 20
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Poison_Ivy_CnC
pam.poison.ivy.detection.threshold
Default Value: 3
Maximum Value: 20
Minimum Value: 1
Type: number

pam.poison.ivy.inspection.limit
Default Value: 15
Maximum Value: 100
Minimum Value: 4
Type: number


Proxy_Bounce_Deep
pam.proxyparse.enabled
Default Value: true
Type: Boolean

pam.proxyparse.bouncedepth
Default Value: 3
Maximum Value: 65535
Minimum Value: 0
Type: number


QuickTime_OBJI_Overflow
pam.mov.mdat.id.scan
Default Value: 4096
Maximum Value: 0xFFFFFFFF
Minimum Value: 2
Type: number


QuickTime_VR_Panoramic_Sample_Overflow
pam.mov.mdat.id.scan
Default Value: 4096
Maximum Value: 0xFFFFFFFF
Minimum Value: 2
Type: number


RAM_Domain_Overflow
pam.content.ram.domain.max
Default Value: 128
Maximum Value: 4294967295
Minimum Value: 1
Type: number


RAS_RRQ_Low_Time_To_Live
pam.ras.rrq.ttl.min
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number


RAT_Content_Advisor_Overflow
pam.rat.scan.limit
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.rat.name.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


RDP_Brute_Force
pam.login.rdp.count
Default Value: 15
Maximum Value: 200
Minimum Value: 1
Type: number

pam.login.rdp.interval
Default Value: 60
Maximum Value: 65000
Minimum Value: 1
Type: number
Units: seconds


RDP_Login_Read_Overflow
pam.rdp.login.name.max
Default Value: 256
Maximum Value: 32000
Minimum Value: 1
Type: number


RIP_Add
pam.rip.table
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 11
Type: number


RIP_Expire
pam.rip.table
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 11
Type: number


RIP_Metric_Change
pam.rip.table
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 11
Type: number


RPC_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


RPC_NFS_Guess
pam.flood.nfsguess.size
Default Value: 64
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.nfsguess.limit
Default Value: 20
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.nfsguess.interval
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


RPC_NFS_NLM_CallerName_Overflow
pam.rpc.nlm.callernamelen
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


RTSP_Content_Type_Overflow
pam.rtsp.contenttype.max
Default Value: 255
Maximum Value: 65535
Minimum Value: 8
Type: number


RTSP_Suspicious_Header
pam.rtsp.header.max
Default Value: 1024
Maximum Value: 65535
Minimum Value: 16
Type: number


Radius_Generic_Intel_Overflow
pam.shellcode.detection
Default Value: true
Type: Boolean


Radius_Password_Buffer_Overflow
pam.radius.pass.max
Default Value: 32
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Radius_User_Buffer_Overflow
pam.radius.user.max
Default Value: 46
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Realwin_Scada_Fcinfotagsetcontrol_Bo
pam.parser.RealwinScada.enabled
Default Value: true
Type: Boolean


Realwin_Scada_HMI_Integer_Overflow
pam.parser.RealwinScada.enabled
Default Value: true
Type: Boolean


Realwin_Scada_HMI_Multiple_Overflow
pam.parser.RealwinScada.enabled
Default Value: true
Type: Boolean


Realwin_Scada_String_Overflow
pam.parser.RealwinHmi.enabled
Default Value: true
Type: Boolean


Rlogin_Auth_Failed
pam.login.rlogin.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.rlogin.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


Rlogin_Name_Very_Long
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Rlogin_Password_Overflow
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Rlogin_TERM_Very_Long
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SDP_Ansi_Escape
pam.content.sdp.ansifield.limit
Default Value: 2
Maximum Value: 65535
Minimum Value: 0
Type: number


SDP_Long_Value
pam.content.sdp.textvalue.limit
Default Value: 1024
Maximum Value: 65535
Minimum Value: 0
Type: number


SIP_Auth_Failed
pam.login.sip.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.sip.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


SIP_Authenticate_Parameter
pam.sip.qop.limit
Default Value: 31
Maximum Value: 65535
Minimum Value: 2
Type: number


SIP_Contact_Overflow
pam.sip.contact.limit
Default Value: 1000
Maximum Value: 65535
Minimum Value: 1
Type: number


SIP_Large_Content_Length
pam.sip.content.length.max
Default Value: 0xFFFF
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SIP_Large_Max_Forwards
pam.sip.maxforwards.limit
Default Value: 70
Maximum Value: 65535
Minimum Value: 1
Type: number


SIP_Long_Header_Name
pam.sip.header.name.limit
Default Value: 240
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SIP_Long_Header_Value
pam.sip.header.value.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SIP_Long_Method_Name
pam.sip.method.limit
Default Value: 12
Maximum Value: 65535
Minimum Value: 3
Type: number


SIP_Long_Request_URI
pam.sip.uri.limit
Default Value: 1000
Maximum Value: 65535
Minimum Value: 1
Type: number


SIP_Long_Via_Host
pam.sip.hostname.limit
Default Value: 63
Maximum Value: 65535
Minimum Value: 1
Type: number


SIP_Unregistered_Endpoint_Invite
pam.sip.registereduri.max
Default Value: 0
Maximum Value: 2097152
Minimum Value: 0
Type: number


SMB_AccountName_Overflow
pam.smb.account.length
Default Value: 64
Maximum Value: 999
Minimum Value: 1
Type: number


SMB_Auth_Failed
pam.login.smb.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.login.smb.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


SMB_Filename_Overflow
pam.smb.filename.max
Default Value: 200
Maximum Value: 2147483647
Minimum Value: 1
Type: number


SMB_Guessable_Password
pam.smb.password.guesses
Type: string


SMB_Malformed
pam.smb.malformed.interval
Default Value: 3600
Maximum Value: 2147483647
Minimum Value: 0
Type: number


SMB_Mass_Login
pam.mass.login.smb.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.mass.login.smb.count
Default Value: 20
Maximum Value: 409
Minimum Value: 1
Type: number


SMB_MaxBuffer_Bo
pam.smb.maxbufferbo.threshold
Default Value: 16384
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMB_NTLM_ExtendedSec_Privilege_Escalation
pam.smb.ntlm.entropy.interval
Default Value: 5
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.smb.ntlm.entropy.count
Default Value: 200
Maximum Value: 500
Minimum Value: 1
Type: number


SMB_Password_Overflow
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMB_Sam_File
pam.smb.sam.response
Default Value: false
Type: Boolean


SMB_Service_Sweep
pam.tcp.sweep.syn
Default Value: false
Type: Boolean


SMB_Transaction_Response_Overflow
pam.smb.transaction.overflow.allowance
Default Value: 2
Maximum Value: 100
Minimum Value: -2147483648
Type: number


SMB_Unicode_Filename_Overflow
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


SMTP_BDAT_Large_Chunk
pam.smtp.bdat.max.chunk
Default Value: 0x3FFFFFFF
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMTP_Command_Binary_Overflow
pam.smtp.command.limit
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SMTP_Etrn_Overflow
pam.smtp.maxetrn
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMTP_Exchange_Verb_DoS
pam.smtp.exchverb.limit
Default Value: 0x1000000
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMTP_NTLM_Auth_Generic_Overflow
pam.smtp.ntlm.auth.max
Default Value: 1000
Maximum Value: 65535
Minimum Value: 36
Type: number


SMTP_ParseAddr_Overflow
pam.smtp.charpaircount
Default Value: 2
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SMTP_Relay_Not_Allowed
pam.smtp.relay.count
Default Value: 15
Maximum Value: 409
Minimum Value: 1
Type: number

pam.smtp.relay.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


SMTP_Too_Many_Connects
pam.smtp.connection.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.smtp.connection.count
Default Value: 200
Maximum Value: 2000
Minimum Value: 1
Type: number


SMTP_User_Unknown
pam.smtp.userunknown.count
Default Value: 15
Maximum Value: 409
Minimum Value: 1
Type: number

pam.smtp.userunknown.serverresponse
Default Value: User unknown
Type: string

pam.smtp.userunknown.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


SNMP_BulkRqst_DoS
pam.snmp.maxrepetitions.limit
Default Value: 1001
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SNMP_Community_Overflow
pam.snmp.community.limit
Default Value: 64
Maximum Value: 65535
Minimum Value: 8
Type: number


SNMP_Crack
pam.snmp.timeout
Default Value: 604800
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


SNMP_Nagios_Plugins_CheckSNMP_BO
pam.snmp.nagios.checksnmp.limit
Default Value: 8192
Maximum Value: 4294967295
Minimum Value: 256
Type: number


SNMP_Suspicious_Version_Size
pam.snmp.max.version
Default Value: 3
Maximum Value: 65535
Minimum Value: 2
Type: number


SNMP_Unsupported_Version
pam.snmp.max.version
Default Value: 3
Maximum Value: 65535
Minimum Value: 2
Type: number


SNMP_V3_HMAC_Security_Bypass
pam.snmp.hmac.minsize
Default Value: 6
Maximum Value: 32767
Minimum Value: 1
Type: number


SOAP_Envelope_Overflow
pam.content.soap.limit
Default Value: 1048576
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SOCKS_Authentication_Malformed
pam.socks.auth.limit
Default Value: 512
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


SOCKS_ShellCode_Detected
pam.socks.shellcode.limit
Default Value: 8192
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SQL_Auth_Failed
pam.login.sql.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.sql.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.sql.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.login.sql.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SQL_Injection
pam.injection.sql.chaff.limit
Default Value: -1
Maximum Value: 1000
Minimum Value: -1
Type: number

pam.injection.sql.score
Default Value: 4
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.sql.boolean.triggers
Default Value: 1
Maximum Value: 2
Minimum Value: 0
Type: number

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.injection.argument.token.limit
Default Value: 8
Maximum Value: 100
Minimum Value: 0
Type: number

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.sql.pedantic
Default Value: false
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


SQL_Injection_Declare_Exec
pam.injection.sql.chaff.limit
Default Value: -1
Maximum Value: 1000
Minimum Value: -1
Type: number

pam.injection.sql.score
Default Value: 4
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.sql.boolean.triggers
Default Value: 1
Maximum Value: 2
Minimum Value: 0
Type: number

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.injection.argument.token.limit
Default Value: 8
Maximum Value: 100
Minimum Value: 0
Type: number

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.sql.pedantic
Default Value: false
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


SQL_Injection_MySQL_Benchmark
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


SQL_Jet_Query_Overflow
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


SQL_SSRP_HeapBo
pam.ssrp.heapbo.threshold
Default Value: 96
Maximum Value: 2147483647
Minimum Value: 1
Type: number


SQL_SSRP_Slammer_Worm
pam.udp.slammer.drop
Default Value: true
Type: Boolean


SQL_SSRP_StackBo
pam.ssrp.stackbo.threshold
Default Value: 96
Maximum Value: 2147483647
Minimum Value: 1
Type: number


SQL_Sybase_OpenServer_Exec
pam.sql.sybase.exec.limit
Default Value: 6
Maximum Value: 65535
Minimum Value: 0
Type: number


SSH_Banner_Length
pam.ssh.maxBannerLen
Default Value: 255
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SSH_Brute_Force
pam.login.ssh.count
Default Value: 12
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.ssh.interval
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.ssh.short.session.time
Default Value: 5
Maximum Value: 300
Minimum Value: 2
Type: number


SSH_ChallengeResponse_Bo
pam.ssh.search.threshold
Default Value: 48
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.ssh.search.charcount
Default Value: 32768
Maximum Value: 4294967295
Minimum Value: 1
Type: number


SSH_Service_Sweep
pam.tcp.sweep.syn
Default Value: false
Type: Boolean


SSL2_Master_Key_Overflow
pam.ssl.v2masterkey.arglenthreshold
Default Value: 8
Maximum Value: 2147483647
Minimum Value: 1
Type: number


SSL_Challenge_Length_Overflow
pam.sslv2.client-hello.challenge-length
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 32
Type: number


SSL_V2_MySQL_Hello_Overflow
pam.sslv2.mysql.max.ciphers.length
Default Value: 96
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SSL_V2_OpenSSL_Get_Shared_Ciphers_BO
pam.ssl.maxciphers
Default Value: 80
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SSL_V3_MySQL_Hello_Overflow
pam.sslv3.mysql.max.ciphers.length
Default Value: 64
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SSL_V3_OpenSSL_Get_Shared_Ciphers_BO
pam.ssl.maxciphers
Default Value: 80
Maximum Value: 4294967295
Minimum Value: 0
Type: number


STUN_KPhone_DoS
pam.stun.kphone.dos.detect
Default Value: false
Type: Boolean


SYNFlood
pam.tcp.synflood.update
Default Value: 180
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.custom.limit
Default Value: 5000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.dstport
Default Value: true
Type: Boolean

pam.tcp.synflood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.size
Default Value: 65528
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.custom
Type: string


SYNFlood_Protection
pam.tcp.synflood.update
Default Value: 180
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.protection.duplicatesyn.timeout
Default Value: 6
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.tcp.synflood.protection.untrusted.rate
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.protection.duplicatesyn.enabled
Default Value: true
Type: Boolean

pam.tcp.synflood.limit
Default Value: 1000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.protection.duplicatesyn.retransmit
Default Value: 2
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.tcp.synflood.custom.limit
Default Value: 5000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.dstport
Default Value: true
Type: Boolean

pam.tcp.synflood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.size
Default Value: 65528
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.custom
Type: string


SYN_Bandwidth_Flood
pam.tcp.synflood.update
Default Value: 180
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.bandwidth.limit
Default Value: 15000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.dstport
Default Value: true
Type: Boolean

pam.tcp.synflood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.size
Default Value: 65528
Maximum Value: 4294967295
Minimum Value: 0
Type: number


SYN_Bandwidth_Flood_Protection
pam.tcp.synflood.update
Default Value: 180
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.protection.duplicatesyn.timeout
Default Value: 6
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.tcp.synflood.protection.untrusted.rate
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 0
Type: number

pam.tcp.synflood.protection.duplicatesyn.enabled
Default Value: true
Type: Boolean

pam.tcp.synflood.protection.duplicatesyn.retransmit
Default Value: 2
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.tcp.synflood.bandwidth.limit
Default Value: 15000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.dstport
Default Value: true
Type: Boolean

pam.tcp.synflood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.synflood.size
Default Value: 65528
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Script_Concealed_Content
pam.script.concealed.content.http
Default Value: false
Type: Boolean


Script_Exploit_Fingerprint
pam.fingerprint.token.enabled
Default Value: true
Type: Boolean


Script_IE_IsComponentInstalled_BO
pam.http.ie.iscomponentinstalled.limit
Default Value: 450
Maximum Value: 16535
Minimum Value: 1
Type: number


Script_Suspicious_Score
pam.script.suspicious.score.limit
Default Value: 100
Maximum Value: 10000
Minimum Value: -1000
Type: number


Security_Management_Heap_BO
pam.udp.secmgmt.allports
Default Value: false
Type: Boolean

pam.udp.secmgmt.altport
Default Value: 0
Maximum Value: 65535
Minimum Value: 0
Type: number


Security_Management_Integer_Underflow
pam.udp.secmgmt.allports
Default Value: false
Type: Boolean

pam.udp.secmgmt.altport
Default Value: 0
Maximum Value: 65535
Minimum Value: 0
Type: number


Security_Management_StringSize_Overflow
pam.udp.secmgmt.allports
Default Value: false
Type: Boolean

pam.udp.secmgmt.altport
Default Value: 0
Maximum Value: 65535
Minimum Value: 0
Type: number


SensorStatistics
pam.statistics.interval
Default Value: 300
Maximum Value: 2592000
Minimum Value: 1
Type: number
Units: seconds

pam.statistics
Default Value: true
Type: Boolean

pam.statistics.samplewindow
Default Value: 1000000
Maximum Value: 6000000
Minimum Value: 1000
Type: number
Units: micro-seconds


SensorStatistics_Cumulative
pam.statistics.interval
Default Value: 300
Maximum Value: 2592000
Minimum Value: 1
Type: number
Units: seconds

pam.statistics
Default Value: true
Type: Boolean

pam.statistics.samplewindow
Default Value: 1000000
Maximum Value: 6000000
Minimum Value: 1000
Type: number
Units: micro-seconds


SensorStatistics_MicroCumulative
pam.statistics.micro.interval
Default Value: 0
Maximum Value: 4294967295
Minimum Value: 300
Type: number
Units: seconds


Shell_Command_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.shell.pedantic
Default Value: true
Type: Boolean

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.injection.argument.token.limit
Default Value: 8
Maximum Value: 100
Minimum Value: 0
Type: number

pam.injection.shell.score
Default Value: 4
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


Skype_Detected
pam.skype.netmask
Default Value: 255.255.0.0
Type: IP Address


Socks_Auth_Failed
pam.login.socks.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.login.socks.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


Stream_DoS
pam.flood.ack.interval
Default Value: 2
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.ack.limit
Default Value: 3000
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.ack.size
Default Value: 2048
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.ack.multiplier
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Subversion_Date_Parsing_BO
pam.subversion.getdatedrev.limit
Default Value: 64
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


Sunrpc_rwall_Message_Overflow
pam.rpc.rwall.msglen
Default Value: 512
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Swf_Video_Stream_Detected
pam.flash.compressed.parse
Default Value: true
Type: Boolean


Syslog_Flood
pam.syslog.flood.interval
Default Value: 2
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.syslog.flood.count
Default Value: 1500
Maximum Value: 2000
Minimum Value: 1
Type: number


TCP_Connections_Open_Flood
pam.tcp.connections.flood.custom.opened
Default Value: 480
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.connections.flood.opened
Default Value: 160
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.connections.flood.custom
Type: string

pam.tcp.connections.flood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TCP_Connections_Rate_Flood
pam.tcp.connections.flood.custom.rate
Default Value: 1800
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.connections.flood.custom
Type: string

pam.tcp.connections.flood.rate
Default Value: 600
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.connections.flood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TCP_Dabber_Sweep
pam.tcp.sweep.syn
Default Value: false
Type: Boolean


TCP_Dataless_Session_RST_DoS
pam.flood.rst.size
Default Value: 16
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.rst.limit
Default Value: 300
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.rst.interval
Default Value: 30
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.rst.multiplier
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TCP_Orphaned_Sessions_DoS
pam.tcp.orphaned.sessions.count
Default Value: 20
Maximum Value: 1000
Minimum Value: 1
Type: number

pam.tcp.orphaned.sessions.interval
Default Value: 600
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TCP_Service_Sweep
pam.tcp.sweep.syn
Default Value: false
Type: Boolean


TCP_Small_Window_DoS
pam.tcp.smallwindow.probes
Default Value: 100
Maximum Value: 2147483647
Minimum Value: 1
Type: number

pam.tcp.smallwindow.secs
Default Value: 5
Maximum Value: 2147483647
Minimum Value: 0
Type: number

pam.tcp.smallwindow.size
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TCP_SynAck_With_Data
pam.tcp.syndata.size
Default Value: 50
Maximum Value: 2000
Minimum Value: 1
Type: number


TCP_Syn_With_Data
pam.tcp.syndata.size
Default Value: 50
Maximum Value: 2000
Minimum Value: 1
Type: number


TCP_Timestamp_DoS
pam.tcp.timestamp.delta
Default Value: 100000
Maximum Value: 500000000
Minimum Value: 1
Type: number


TCP_Within_Window_DoS
pam.tcp.outside.window.exact.rst.max
Default Value: 3
Maximum Value: 60000
Minimum Value: 0
Type: number

pam.tcp.outside.window.max
Default Value: 24
Maximum Value: 60000
Minimum Value: 0
Type: number


TCP_Zero_Window_DoS
pam.tcp.zerowindow.probes
Default Value: 100
Maximum Value: 2147483647
Minimum Value: 25
Type: number


TFTP_File_Brute_Force
pam.file.tftp.interval
Default Value: 20
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.file.tftp.count
Default Value: 10
Maximum Value: 409
Minimum Value: 1
Type: number


TFTP_Filename_VeryLong
pam.file.maxname
Default Value: 150
Maximum Value: 2147483647
Minimum Value: 1
Type: number


TFTP_Long_Transfer_Mode
pam.tftp.mode.limit
Default Value: 16
Maximum Value: 4294967295
Minimum Value: 4
Type: number


TLS_Connections_Rate_Flood
pam.tls.connections.flood.custom.rate
Default Value: 150
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tls.connections.flood.rate
Default Value: 120
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.tcp.connections.flood.window
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number


TLS_Excessive_Renegotiations
pam.tls.renegotiation.client-only
Default Value: false
Type: Boolean

pam.tls.renegotiation.threshold
Default Value: 5
Maximum Value: 65535
Minimum Value: 1
Type: number

pam.tls.renegotiation.interval
Default Value: 60
Maximum Value: 65535
Minimum Value: 5
Type: number


TLS_Large_Client_Certificate
pam.tls.long.certificate.length
Default Value: 3072
Maximum Value: 65535
Minimum Value: 0
Type: number


TLS_Weak_Cipher_Suite
pam.tls.strong.cipher.length
Default Value: 112
Maximum Value: 65535
Minimum Value: 0
Type: number


TLS_Weak_X509_Certificate
pam.tls.strong.certificate.length
Default Value: 1024
Maximum Value: 65535
Minimum Value: 0
Type: number


TLS_Zero_Length_Record
pam.tls.allow.zerolen.appdata
Default Value: true
Type: Boolean


Telnet_Auth_Failed
pam.login.telnet.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number

pam.login.telnet.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


Telnet_Inline_Demo_Capslock
pam.telnet.rewrite
Default Value: false
Type: Boolean


Telnet_Login_Overflow
pam.login.maxname
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Telnet_Password_Overflow
pam.login.maxpass
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Telnet_PolycomDoS
pam.telnet.polycomdos.count
Default Value: 75
Maximum Value: 409
Minimum Value: 1
Type: number

pam.telnet.polycomdos.interval
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Timbuktu_Login_Overflow
pam.timbuktu.max.username.length
Default Value: 31
Maximum Value: 65535
Minimum Value: 1
Type: number


Trace_Route
pam.icmp.traceroute.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.icmp.traceroute.count
Default Value: 2
Maximum Value: 2000
Minimum Value: 1
Type: number


Trace_Route_UDP
pam.icmp.traceroute.interval
Default Value: 10
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.icmp.traceroute.count
Default Value: 2
Maximum Value: 2000
Minimum Value: 1
Type: number


Twinge_Attack
pam.flood.icmp.limit
Aliases: pam.icmp.maxcnt
Default Value: 100
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.icmp.size
Default Value: 512
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.icmp.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


UDP_Flood_DoS
pam.flood.udp.size
Default Value: 2048
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.udp.limit
Default Value: 15
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.udp.port.whitelist
Maximum Value: 65535
Minimum Value: 0
Type: number

pam.flood.udp.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.udp.protection
Default Value: false
Type: Boolean

pam.flood.udp.timeout
Default Value: 60
Maximum Value: 65535
Minimum Value: 2
Type: number


UDP_Squid_WCCP_Overflow
pam.wccp.packet.threshold
Default Value: 1428
Maximum Value: 32767
Minimum Value: 24
Type: number


UDP_Storm_Worm
pam.udp.stormworm.count
Default Value: 120
Maximum Value: 409
Minimum Value: 1
Type: number

pam.udp.stormworm.interval
Default Value: 60
Maximum Value: 4294967295
Minimum Value: 1
Type: number


UDP_Syslogd_BO
pam.udp.syslog.threshold
Default Value: 1024
Maximum Value: 2147483647
Minimum Value: 0
Type: number


URL_File_URI_Overflow
pam.parser.urlfile.enabled
Default Value: true
Type: Boolean

pam.urlfile.scan.limit
Default Value: 128
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number

pam.urlfile.uri.limit
Default Value: 512
Maximum Value: 2147483647
Minimum Value: -2147483648
Type: number


Ultravox_Winamp_MP3_BO
pam.ultravox.winamp.mp3tags.limit
Default Value: 4077
Maximum Value: 65535
Minimum Value: 256
Type: number


Unicenter_Msg_Queue_BO
pam.unicenter.msgqbo.limit
Default Value: 256
Maximum Value: 32766
Minimum Value: 0
Type: number


Unistim_Audio_Hijack
pam.unistim.audio.hijack.interval
Default Value: 4
Maximum Value: 65535
Minimum Value: 1
Type: number

pam.unistim.audio.hijack.packets
Default Value: 5
Maximum Value: 65535
Minimum Value: 1
Type: number


Unistim_Flood
pam.flood.unistim.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.flood.unistim.limit
Default Value: 250
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.unistim.size
Default Value: 4
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.unistim.multiplier
Default Value: 2
Maximum Value: 4294967295
Minimum Value: 1
Type: number


Unistim_Reregister_DoS
pam.unistim.reset.limit
Default Value: 3
Maximum Value: 65535
Minimum Value: 1
Type: number


VNC_HTTP_Get_Overflow
pam.http.url.vnc
Default Value: 1024
Maximum Value: 65535
Minimum Value: 1
Type: number


VNC_Login_Failed_User
pam.login.vnc.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.vnc.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


VOIP_Brute_Force
pam.voip.bruteforce.interval
Default Value: 3
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.voip.bruteforce.count
Default Value: 50
Maximum Value: 409
Minimum Value: 1
Type: number


VOIP_DRDoS
pam.voip.drdos.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.voip.drdos.count
Default Value: 25
Maximum Value: 409
Minimum Value: 1
Type: number


VOIP_New_Call_Dos
pam.flood.newcalldos.size
Default Value: 4
Maximum Value: 1048576
Minimum Value: 1
Type: number

pam.flood.newcalldos.multiplier
Default Value: 2
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.newcalldos.limit
Default Value: 250
Maximum Value: 4294967295
Minimum Value: 1
Type: number

pam.flood.newcalldos.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds


VRRP_Detected
pam.vrrp.report.limit
Default Value: 600
Maximum Value: 2147483647
Minimum Value: 1
Type: number


Veritas_BackupExec_BO
pam.veritas.hostname.limit
Default Value: 66
Maximum Value: 65535
Minimum Value: 1
Type: number


Veritas_NetBackup_ConnectOptions_Overflow
pam.veritas.hostname.limit
Default Value: 66
Maximum Value: 65535
Minimum Value: 1
Type: number


Veritas_NetBackup_Request_Overflow
pam.veritas.bpcd.request.limit
Default Value: 0x8000
Maximum Value: 65535
Minimum Value: 1
Type: number


WINS_PointerHijack
pam.wins.pdu.length.limit
Default Value: 4096
Maximum Value: 4294967295
Minimum Value: 1
Type: number


WINS_UDP_Pointer_Code_Exec
pam.WINS_UDP_Pointer_Code_Exec.limit
Default Value: 50
Maximum Value: 4294967295
Minimum Value: 0
Type: number


WinAmp_Playlist_Long_Filename_Overflow
pam.pls.binaryonly
Default Value: true
Type: Boolean

pam.pls.urlsize
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Win_MessengerPopup_Bo
pam.win.messengerpopup.limit
Default Value: 2200
Maximum Value: 1000000
Minimum Value: 0
Type: number


Windows_NNTP_Overflow
pam.nntp.xpat.line.limit
Default Value: 200
Maximum Value: 4294967295
Minimum Value: 0
Type: number


Windows_Printing_Service_DOS
pam.lpr.dos.interval
Default Value: 1
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.lpr.dos.count
Default Value: 10
Maximum Value: 2000
Minimum Value: 1
Type: number


WordPro_Shellcode_Detected
pam.wordpro.scan.limit
Default Value: 40000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_Document_Too_Large
pam.content.xml.limit
Default Value: 8388608
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_EntityDecl_DoS
pam.content.xml.entitydecl.limit
Default Value: 50
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_EntityRef_DoS
pam.content.xml.entityref.limit
Default Value: 10000
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_Entity_Name_Overflow
pam.content.xml.entityname.limit
Default Value: 200
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_JNLP_Codebase_BO
pam.content.jnlp.codebase.max
Default Value: 1024
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_LibreOffice_Manifest_Malformed
pam.content.zip.decompress
Default Value: false
Type: Boolean


XML_Libxml2_DTD_Element_DoS
pam.content.xml.element.depth.limit
Default Value: 256
Maximum Value: 4294967295
Minimum Value: 0
Type: number


XML_Name_Overflow
pam.content.xml.name.limit
Default Value: 255
Maximum Value: 65536
Minimum Value: 0
Type: number


XML_QuickTime_QTL_Long_Type
pam.content.qtl.type.limit
Default Value: 127
Maximum Value: 65535
Minimum Value: 0
Type: number


XML_Word_Access_Violation
pam.content.zip.decompress
Default Value: false
Type: Boolean


XPATH_Injection
pam.injection.facebook_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.sql.boolean.triggers
Default Value: 1
Maximum Value: 2
Minimum Value: 0
Type: number

pam.injection.yahoo_fingerprint.enable
Default Value: true
Type: Boolean

pam.injection.http.headers.enabled
Default Value: true
Type: Boolean

pam.parser.argument.injection.enabled
Default Value: true
Type: Boolean

pam.injection.http.hostpath.enabled
Default Value: true
Type: Boolean


YahooMSG_Filename_Overflow
pam.yahoo.filename.limit
Default Value: 124
Maximum Value: 4294967295
Minimum Value: 1
Type: number


YahooMSG_UserID_Overflow
pam.yahoo.userid.limit
Default Value: 32
Maximum Value: 4294967295
Minimum Value: 1
Type: number


ZenWorks_remMgr_Overflow
pam.parser.zenWorks.remMgr.maxLength
Default Value: 0xff
Maximum Value: 65535
Minimum Value: 0
Type: number


pcAnywhere_Login_Failed
pam.login.pcanywhere.interval
Default Value: 3600
Maximum Value: 4294967295
Minimum Value: 1
Type: number
Units: seconds

pam.login.pcanywhere.count
Default Value: 4
Maximum Value: 409
Minimum Value: 1
Type: number


Posted by Milan Mesic at 05:03 0 comments
Labels: , , ,
Subscribe to: Posts (Atom)

Disclaimers: This is a personal weblog. The opinions expressed here are entirely my own and not those of my employer and/or its affiliates. This material is not sponsored or endorsed by Cisco Systems, Inc. Cisco, Cisco Systems, CCIE and the CCIE Logo, CCDP, CCNA and CCDA are trademarks of Cisco Systems, Inc. and its affiliates.