If you are using Network Sensor, you get that ability with version 7.0. Version 7.0 is available today for many versions of Windows and Linux. Version 7.0 for Solaris and IPSO are currently in development and testing. To the best of my knowledge (I am no authority on Network Sensor schedules), I believe they will be released before the end of the year.
Paul -----Original Message----- From: ALLEN, DONALD S (SWBT) [mailto:da1295@;sbc.com] Sent: Wednesday, November 06, 2002 2:22 PM To: [EMAIL PROTECTED] Subject: [ISSForum] Filtering Events in RS 6.5 Hello, I have been attempting to filter events and not ports in the sensor policy. I would like to have the ability to have the Alert enabled, but filter Source/Dest IP, Alert name, Direction (Out or IN ). The goal would be for example to filter All Nimda type alerts Incoming but alert on Nimda outbound from my network. This would alert me of any infected machines on my network. Currently from what I can tell, the only option is to Check the alert off. Donald 'Scott' Allen _______________________________________________ ISSForum mailing list [EMAIL PROTECTED]
