Skip to content

Commit

Permalink
userguide: clarify midstream exception policy
Browse files Browse the repository at this point in the history
The description of behavior when midstream is enabled and exception
policy is set to ignore wasn't descriptive enough.

Fix typos.
  • Loading branch information
jufajardini authored and victorjulien committed Jan 19, 2024
1 parent 6e4cc79 commit df64448
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions doc/userguide/configuration/exception-policies.rst
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ Auto
''''

**In IPS mode**, the default behavior for most of the exception policies is to
fail close. This means droping the flow, or the packet, when the flow action is
fail close. This means dropping the flow, or the packet, when the flow action is
not supported. The default policy for the midstream exception will be ignore if
midstream flows are accepted.

Expand Down Expand Up @@ -131,7 +131,7 @@ midstream pick-ups enabled or not and the various exception policy values:
- Midstream pick-up sessions ENABLED (stream.midstream=true)
- Midstream pick-up sessions DISABLED (stream.midstream=false)
* - Ignore
- Session tracket and parsed.
- Session tracked and parsed, inspect and log app-layer traffic, do detection.
- Session not tracked. No app-layer inspection or logging. No detection. No stream reassembly.
* - Drop-flow
- Not valid.*
Expand Down Expand Up @@ -169,7 +169,7 @@ whole flow.
- Midstream pick-up sessions ENABLED (stream.midstream=true)
- Midstream pick-up sessions DISABLED (stream.midstream=false)
* - Ignore
- Session tracket and parsed.
- Session tracked and parsed, inspect and log app-layer traffic, do detection.
- Session not tracked. No app-layer inspection or logging. No detection. No stream reassembly.
* - Drop-flow
- Not valid.*
Expand Down

0 comments on commit df64448

Please sign in to comment.