preprocessor configurations to define what to do with packets before the detection engine sees them, and detection engine configurations to define exactly how alerting is to take place

a rule statement characterized by the message you configure to appear in the alert, and the rule body that contains all of the matching criteria such as source, destination, and protocol

a rule header to define source, destination, and protocol, and the output configuration to determine which form of output to produce if the rule triggers

a rule body that contains packet-matching criteria or options to define where to look for content in a packet, and a rule header to define matching criteria based on where a packet originates, where it is going, and over which protocol

You can use geolocation criteria to specify source IP addresses by country and continent, as well as destination IP addresses by country and continent.

You can use geolocation criteria to specify destination IP addresses by country but not source IP addresses.

You can use geolocation criteria to specify source and destination IP addresses by country but not by continent.

You can use geolocation criteria to specify source and destination IP addresses by continent but not by country.

Static NAT supports only TCP traffic.

Static NAT is normally deployed for outbound traffic only.

Static NAT provides a one-to-one mapping between IP addresses.

Static NAT provides a many-to-one mapping between IP addresses.