Rule:--Sid:13899--Summary:This event is generated when network traffic that indicates iTunes client is being used.--Impact:Possible policy violation. The use of iTunes client may be prohibited by corporate policy in some network environments. --Detailed Information:This event indicates that the iTunes client is being used on the protected network.--Affected Systems:All systems using iTunes client--Attack Scenarios:This is a possible policy violation, it may be that iTunes client has been installated on a client host.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Disallow the use of iTunes client on the protected network and enforce or implement an organization wide policy on the use of iTunes client.--Contributors:Sourcefire Vulnerability Research Team--Additional References:--