Currently it is not possible to do this. We are adding functionality to an upcoming release of SiteProtector that will allow you to trigger a Central Response on a sensor state change.
Thank you, Adrian Kaylor, CISSP Technical Product Manager Internet Security Systems Phone: (404) 236-3052 -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of Nicholas Cross Sent: Tuesday, May 24, 2005 4:46 AM To: [EMAIL PROTECTED] Subject: [ISSForum] Alert on sensor "Not Responding" How can I setup ISS SP2.0 to alert whenever a sensor is seen as "Not Responding" in the console view? We have a number of NIDS that occassionally fail, but the issDaemon and issCSF et al. serives are still running on the NIDS, but the events are not being sent back to the console. It would be of benefit if we could be alerted to this fact via SNMP. Or are we looking at a shell script to capture the heartbeat/stats events and to determine whether one has been seen in the last 10mins or so? We have all the alerting turned on, in the event collector prefences at the moment. How does everyone else do this on the list? best regards, Nick. yes, i didnt email from my work account ;-) I am that paraniod _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
