Adding Match Patterns

To add a match pattern

1. Navigate to the OBJECT | Match Objects > Match Pattern.

2. Click the Add icon.

   

3. Enter a descriptive Object Name.

4. Select a Match Object Type and Match Type from respective drop-down menus. For more information about description of match object type, refer to About Match Patterns.

   If the Match Type is Regex Match, you can select one of the predefined regular expressions and click the type to add it to the List. For more information, refer to Regular Expressions.

   You can also type a custom regular expression into the Content field and click Add icon to add it to the List.

   

5. Select the Input representation.

   • Alphanumeric to match a text pattern

   • Hexadecimal to match binary content

     You can use a hex editor or a network protocol analyzer like Wireshark to obtain hex format for binary files.

6. Add the object Content in one of the following ways:

   • Enter a pattern to match in the Content field and click the Add icon.

     The content appears in the List field.

     You can add multiple entries to create a list of Content elements to match. All content that you provide in a match object is case-insensitive for matching purposes.

   • Click Load From File icon and import a list of elements from a text file.

     Each element in the file must be on a line by itself.

   Multiple entries, either from a text file or entered manually, are displayed in the List. List entries are matched using the logical OR, so if any item in the list is matched, the action for the policy is executed.

   A match object can include a total of not more than 8000 characters. If each element within a match object contains approximately 30 characters, you can enter about 260 elements. The maximum element size is 8000 bytes.

7. Click Save.

   New pattern is created and listed on the OBJECT | Match Objects > Match Patterns page. You can select this pattern while creating a custom match object and which in turn can be used in security policies.