TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- I would like to be able to alert on the FTPSite_Cmd event but get far too many false alerts on the "help" value. I believe this is probably sent by all IE browser users and would like to eliminate this without affecting the other FTPSiteCmd values from being detected. Is there a way to filter only the "Help" value to prevent events of this value from being logged/alerted? Thanks! Kris Kistler WAN Communications / Security Administrator St. Louis, MO
