TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Dave - Found I was off a bit on the FILENAME issue in user defined events. I was right about the SMTP part for the rest of it but the filename with work for TFTP, FTP, and NFS data. The help-file for the Console and Sensors has the information. Hank Schupp -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of David W Frye Sent: Friday, September 06, 2002 1:57 PM To: [EMAIL PROTECTED] Subject: User Defined Events Not Working TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Gang, We recently added some user defined events to stop the download of Instant Messaging clients. I have kills defined in a User defined event for Install_AIM.exe, icq2002aaol.exe, etc. None of them are working. The sensors are 6.5. I'm now questioning all my other user defined events. The event is on a Filename with the string being the file names like above. Anyone have any ideas why these are not working? I've looked at the policy file in notepad and everything looks in order. I have no filters set up for my IP address. I am at a loss. Ideas welcome! Thanks! Dave
