Yes, you can create something like filters, editing trust.pair and
trust.issue parameters in \ISS\issSensors\hqent04\BlackICE\Blackice.ini.
Now these parameters are not available from GUI, but ISS said that it will
be in nearest future (hope it will be so).
You can find more info on:
http://documents.iss.net/literature/BlackICE/BI-AAG_70.pdf pp 24,25
http://documents.iss.net/literature/RealSecure/RS_SvrSensor_Adv_Tuning_Reference_Windows.pdf
http://documents.iss.net/literature/RealSecure/nsAdv_Tuning_Reference.pdf
Good luck!
---
Best regards, Sergey V. Soldatov.
Information security department.
"Dan Widger"
<DWidger@landata.com> To: <issforum@iss.net>
Sent by: cc:
issforum-bounces@iss.net Subject: [ISSForum] Request
Server Sensors to Ignore ALL Traffic
from Approved ISS Inet
Scanners
15.11.2004 21:45
Is there a ways to tell a(ll) ISS Server Sensors to ignore any traffic
from an (authorized) ISS Internet Scanner?
Dan Widger
713\892-3471
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
