Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How to make SSIM select assignee based on source ip

Created: 20 May 2014 • Updated: 03 Jun 2014 | 1 comment
This issue has been solved. See solution.

Hi all,

I have a doubt that for rules like internal port sweep where source ip is same and destination ip is different. So it will be better to select assigned user for these incidents based on source ip only.My question is if it is possible in SSIM?

Operating Systems:

Comments 1 CommentJump to latest comment

Avkash K's picture

Hi Jefin,
As per my knowledge SSIM Auto Assign feature is designed in the way considering target IP address only.
Please check below KB Article for more detailed explanation on this.

http://www.symantec.com/docs/TECH184747

Regards,

Avkash K

SOLUTION