TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
Hi George
This setting is "partly controlled" via View|Global Responses, going
to the RSKILL branch and clicking/unclicking the box. If you change
this value you will be warned
"You have made changes to the global responses, you will have to
merge/replace these from each sensor you want to use the changes."
Behind the scenes the GUI will have changed the killtag flag in the
response.policy file.
My understanding is that this file defines Global Responses. I think
of it as a file used by the GUI when you want to play with response
settings (or used by the GUI for a new sensor's responses?).
You have not yet APPLIED these global responses to your sensor.
Furthermore, even if you apply a new policy to your sensor, I do not
think that it will apply the changed global reponses to your sensor.
Next, select your sensor in the sensor window, right-click it and
select "Responses...". This should show you the responses for the
selected sensor, together with buttons to Merge or Replace them.
Now then i've just had a quick play, and it looks like Merge is not
relevant in this case (ie you would be trying to merge a flag, and
that flag already exists anyway - not very meaningful). You could use
Replace BUT BE VERY CAREFUL if you're new to the game of responses.
WARNING! Doing a replace could replace (trash) any existing response
customisation you have already done on the sensor. This means you
could lose changes to SNMP server name, Email gateway etc.
So... you could change the flag on each sensor individually, as
described immediately above, but by clicking/unclicking the box and
hitting OK rather than the Merge or Replace buttons. Note that if you
do make a change and click OK then the network engine will reload its
configuration. You may want to change global responses anyway ready
for any future sensors.
I'm not an expert in this area - I tend to have one main set of global
responses and use the 'replace' button. Just be sure to keep a written
record of the values before you do anything, then check them again
afterwards (both (a) global settings (b) individual sensor ones).
Hope this makes sense. Anybody else out there correct me if i'm wrong.
James
On Thu, 26 Apr 2001 08:16:12 -0400, you wrote:
>
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
>----------------------------------------------------------------------------
>
>What is meant by "You must replace/merge with each sensor" (or wording very close to
>this) when you uncheck the kill tag option?
>
>Thanks
>George Lewis
>
