Hi all We can configure the sesnor to "Request block host"and "Request Rate limit." If these actions are configured for the signatures and the signatures are triggered, request is sent to routers/switches that are present in the blocking devcies list.
My understanding is that the request is sent to all the devices in the blocking device list. In that case, the block request or rate limit will be also sent to devices that are not relevent to the attack. Is there any way where we can tie the blocking request or rate limit request triggered by signature to specific hosts or subset of hosts in the blocking device list defined in the sensor. With regards Kingsley Charles
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
