Edge & Network

Firewall & IPS

Next-generation firewall policy, intrusion prevention and sandboxing across data centres and the ten Bangladesh Bank offices

Intrusion prevention · top signatures

Signature	Name	Severity	Hits · 24 h	Action
ET 2024897	Log4j JNDI lookup attempt	Critical	1,204	Block
ET 2034647	Brute force against VPN portal	High	8,912	Block
ET 2027865	Possible SMB lateral movement	High	12	Block
ET 2019401	TLS certificate on known C2 list	Critical	3	Block
ET 2013028	Suspicious user agent	Medium	4,410	Alert

Sandbox verdicts

File	Source	Type	Behaviour	Verdict
invoice_oct.xlsm	Email to RO liaison	Office macro	Spawns PowerShell, contacts new domain	Malicious
goAML_guide.pdf	Web download	PDF	No dynamic behaviour	Clean
update_tool.exe	USB (blocked)	Windows binary	Disables Defender, persistence key	Malicious

Open-source path: Suricata with Emerging Threats Open rules for IPS, Zeek for network metadata, CAPE for sandboxing. Commercial firewalls feed the same view through their APIs.