Can someone advise me if have any other method can see pattern detail that protected ad per below output?
srx5600> show security idp attack detail HTTP:APACHE:HTTPD-MOD-CACHE-DOSDisplay Name: HTTP: Apache HttpD Mod Cache SoCache Denial of ServiceSeverity: MinorCategory: HTTPRecommended: trueRecommended Action: DropType: signatureDirection: CTSFalse Positives: unknownShellcode: noFlow: controlContext: http-headerNegate: falseTimeBinding: Scope: none Count: 1Hidden Pattern: TruePattern: Protected
The protected pattern can not be seen. Please see the KB for more details:
If i open JTAC, is it possible JTAC will share the pattern info to partner?
No, JTAC cannot share this information since this is proprietory.
If you are experiencing a false positive hit with your application on this signature, I would open a JTAC case to investigate. They can help with that type of issue.
Thanks for the feedback