Hi,
Is there a way to have RSKill be called when a signature occurs within a
certain threshold? Say, for example, that if a signature occurs 60 times or
more in a minute, then IDS will activate the RSKill response to the source and
destination IPs. I know RSKill can be used as a response when a signature
occurs just once, but what about having RSKill occur only when a certain
threshold of signatures occurs?
Thanks,
Brian
---------------------------------
Get your own web address for just $1.99/1st yr. We'll help. Yahoo! Small
Business.
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
