[ossec-list] Active Response

[T price]

Sorry for the simple question but what is part of the active response? if I
want to get this working in a new environment but don't want to cause any
problems, do I need to turn anything off?