On 8/23/12 10:49 AM, Michael Starks wrote: > <rule id="4386" level="10" frequency="8" timeframe="240"> > <if_matched_sid>4334</if_matched_sid> > <description>Nultiple AAA (VPN) authentication > failures.</description> > <group>authentication_failures,</group> > </rule> Thanks for your answer, but I would like to silence the corresponding rule, say, if 4386 is fired and then can I silence 4334 for 40 minutes, as long as rule 4386 is fied?
-KH
