Jim, I don't understand what you mean exactly. SiteProtector users will get the Service Packs and keep working as always. Anything particular in mind?
Jean Paul -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of Mohr James Sent: Wednesday, November 17, 2004 3:14 PM To: [EMAIL PROTECTED] Subject: AW: [ISSForum] Reducing the number of events How does the affect SiteProtector users. (My fault for not specifying which product I had) Regards, Jim Mohr > -----Urspr�ngliche Nachricht----- > Von: Ballerini, Jean Paul (ISS EMEA) [mailto:[EMAIL PROTECTED] > Gesendet: Mittwoch, 17. November 2004 13:55 > An: Mohr James; [EMAIL PROTECTED] > Betreff: RE: [ISSForum] Reducing the number of events > > > That is why the new policy editor is being developed. > On the next G400/G2000 release that will be possible; next > year it will become possible on all appliances. > > Regards, > > Jean Paul > > -----Original Message----- > From: Mohr James [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 17, 2004 10:43 AM > To: Ballerini, Jean Paul (ISS EMEA); [EMAIL PROTECTED] > Subject: AW: [ISSForum] Reducing the number of events > > That means I have to go through every single event and > configure it individually. I was hoping for something global > where I could say to simply ignore *all* low severity events. > > Regards, > > Jim Mohr > > > -----Urspr�ngliche Nachricht----- > > Von: Ballerini, Jean Paul (ISS EMEA) [mailto:[EMAIL PROTECTED] > > Gesendet: Mittwoch, 17. November 2004 09:08 > > An: Mohr James; [EMAIL PROTECTED] > > Betreff: RE: [ISSForum] Reducing the number of events > > > > > > Yes, > > > > But it is a little long to explain. > > Look at the advanced parameters of the events under event > > propagation. That is where you can reduce the number of alert > > (and data stored) per event. You'll have to use LogFiltered > > instead of LogWithoutRaw. > > > > Jean Paul > > > > -----Original Message----- > > From: [EMAIL PROTECTED] On Behalf Of Mohr James > > Sent: Tuesday, November 16, 2004 12:44 PM > > To: [EMAIL PROTECTED] > > Subject: [ISSForum] Reducing the number of events > > > > Hi All! > > > > My boss wants to significantly reduce the number of events > > that are sent from a number of sensors. I know you can > > disable specific events, but is there anyway to say that you > > do not want any low priority events at all. I know how to > > change the view in the console to not display low severity, > > but I my boss does not want them to even get sent to the > > event collector. Is there any way to do this? > > > > Regards, > > > > Jim Mohr > > > > _______________________________________________ > > ISSForum mailing list > > [EMAIL PROTECTED] > > > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > > https://atla-> mm1.iss.net/mailman/listinfo/issforum > > > > To > > contact the > > ISSForum Moderator, send email to [EMAIL PROTECTED] > > > > The ISSForum mailing list is hosted and managed by Internet > > Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. > > > > > > > > > _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
