topic Event Variable - Internet Address Range in Network Security https://community.cisco.com/t5/network-security/event-variable-internet-address-range/m-p/551652#M100388 <P>I am looking to create an event variable for any external IP addresses. My current event variable value for $OUT is: 0.0.0.0 - 255.255.255.255. Is there way to make it so that this event variable excludes my $INTERNAL and $DMZ address ranges? It seems like there is overlapping ranges otherwise. Thanks.</P><P></P><P></P> Sun, 10 Mar 2019 10:03:51 GMT mvpwendel01 2019-03-10T10:03:51Z Event Variable - Internet Address Range https://community.cisco.com/t5/network-security/event-variable-internet-address-range/m-p/551652#M100388 <P>I am looking to create an event variable for any external IP addresses. My current event variable value for $OUT is: 0.0.0.0 - 255.255.255.255. Is there way to make it so that this event variable excludes my $INTERNAL and $DMZ address ranges? It seems like there is overlapping ranges otherwise. Thanks.</P><P></P><P></P> Sun, 10 Mar 2019 10:03:51 GMT https://community.cisco.com/t5/network-security/event-variable-internet-address-range/m-p/551652#M100388 mvpwendel01 2019-03-10T10:03:51Z Re: Event Variable - Internet Address Range https://community.cisco.com/t5/network-security/event-variable-internet-address-range/m-p/551653#M100398 <HTML><HEAD></HEAD><BODY><P>On version 5.x via the IDM...the $ANY variable is 0.0.0.0-255.255.255.255.</P><P>I've never really found good documentation that describes the process. However, if you define more specific event variables they will match. So if you define your $INTERNAL and $DMZ address ranges, it should work as expected. i.e. if you use $ANY in an event filter rule it won't match addresses in that range.</P></BODY></HTML> Mon, 19 Jun 2006 19:59:33 GMT https://community.cisco.com/t5/network-security/event-variable-internet-address-range/m-p/551653#M100398 mhellman 2006-06-19T19:59:33Z