Micheal,
Just take a look in the status field of the events and watch for simulated
blocks, if you activate blocking in the sensor policy.
Mit freundlichen Gruessen / Best regards,
Stephan Luedorf
-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On Behalf Of
McLean, Michael R
Sent: Wednesday, September 07, 2005 5:31 PM
To: ISS user group (E-mail)
Subject: [ISSForum] G400 blocked
We have recently put our G400 in inline simulation mode.
My question is:
Can I produce a report of what the box sees and thinks he should be blocking?
Under SP I can highlight the tag names and ask what are the event details to
see the blocked column, however it's not much fun.
Thanks,
MRM
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
*****************************************************************************
Probleme mit Spam Mails?
Glauben Sie, Ihr Viren- und Spam Schutz kostet Sie zuviel?
Dann testen Sie e:scan V3 powered by postini kostenlos mit unserer Trial
Version!!
Mehr Infos unter:
http://www.integralis.de/services_managed_services_escan.php
*****************************************************************************
Please note that:
1. This e-mail may constitute privileged information. If you are not the
intended recipient, you have received this confidential email and any
attachments transmitted with it in error and you must not disclose, copy,
circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in
accordance with lawful business practices.
3. The contents of this email are those of the individual and do not
necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are
subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is
sent.
http://www.integralis.com
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
