Alert for web-based email sites

["Sheahan, Paul (PCLN-NW)" <Paul.Sheahan () priceline com>]

Hello,

I'd like to create a rule in Snort to alert me anytime someone opens an SSL
session at www.hotmail.com (since it is against our security policy to
access web email). 
I would ideally like to do this for all webmail related sites but I'm not
sure how to go about it. For example, it's OK for a user to go to
www.yahoo.com but not to get webmail from Yahoo. 

Is there anyone else out there doing checks for this type of thing?



Thanks,
Paul


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users