What will happen when going into prevention?
Updated: 29 Nov 2009 | 2 comments
It would be a helpful feature to get a sign a or a status line that says what will be the action of that event when prevention is enabled.
Thank you.
idea Filed Under:
Comments
Could you provide some
Could you provide some additional context? When putting an IPS policy into profile mode (by globally disabling prevention) we collect this data in the CSP management system. When an action is performed, it is allowed but CSP reports what action it would have taken -- allow or block.
Thanks.
Additional info
Hi...
When putting an ips policy into profile mode the data is collected and shown as events on the management console.
Prevention events are shown in blue and these are basically the events that you should be looking after.
There is a detail called: "Disposition" and it says either Allowed or Blocked.
But this doesn't give me any clue what will happen to that event when prevention is enabled, I would like the system just to give me an indication of what will happen when going into prevention.
Regards
Would you like to reply?
Login or Register to post your comment.