Hi, I need to know the best practice for applying responses to sensors. One of the response is to 'log with raw data'. Is it recommended to keep this enabled for all signatures? Will the data not be humongous and create performance issues? Will privacy be an issue? It's a financial institution.
Appreciate if someone could share there experience with me. Thanks and regards Gijo Thomas _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
