TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Yes, they do, but I cannot seem to find the URL to the Mailing list subscription page. ISS just recently re-did their web page, and it seems pretty nice and all, but I like simple web pages ones that still work the Lynx browser or the Apple Newton WebBrowser. Yes, some of us still have a Newton .. :) Excellent Market strategy I might add. The KISS method need not apply.. (Only kidding -:) http://xforce.iss.net/maillists/ <-- you can select what mailing lists you would like to subscribe or unsubscribe from there. There is a digest command you can send to majordomo though. It is not indicated on the webpage that one can subscribe to the ISSForum digest version ??? [EMAIL PROTECTED] 04/16/00 09:08 AM To: [EMAIL PROTECTED] cc: Subject: RE: IPDuplicate -reply - DO NOT FILTER EVENT -reply Mark, Sorry to bother you with a trivial question. Do you know whether ISS forum has a digest format? I travel during the week, and am drowning in e-mail from this group. -- Barbara > > TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to > [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! > ---------------------------------------------------------------------------- > > Now, that is an interesting statement, since as you say some devices may > accidental trigger RS events, one must be very aware of the network > architecture and how the ISS RealSecure Policy is crafted. One can > trigger many false positives by having such protocols as HSRP or other > High Availability or IP-Sharing devices on a network. Look at the details > of the IPDuplicate event, if it caused by the use of these protocols, you > can certainly create an exception list with a custom connection event and > not report the event if it is caused by the network protocols that are > deployed. > > There are simpler solutions in solving the statement below, but that will > be left as an exercise for the reader/lurker.. :) > > /m > > > > > "Mark Clancy" <[EMAIL PROTECTED]> > Sent by: [EMAIL PROTECTED] > 04/08/00 08:57 AM > > > To: <[EMAIL PROTECTED]> > cc: > Subject: RE: IPDuplicate -reply - DO NOT FILTER EVENT > > > > TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message > to > [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any > problems! > ---------------------------------------------------------------------------- > > One other thing is if you have devices that are in high availability modes > like routers with HSRP that can trigger RS events. Same IP different MAC > addresses. > > As noted before you should investigate, but this might help narrow it > down. > > -Mark > > > > > > >
