IPS 5 Event Variables

[milanod]

Newbie here so go easy on me..

I am pulling my hair out on this.

What is the proper way to create an event variable for addresses outside my networks? Ie: internet addresses

Thanks

Dan

[didyap]

Use the variables variable_name address ip_address command in service event action rules submode to set up event action variables. The IP address can be one address, a range, or ranges separated by a comma.

http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_configuration_guide_chapter09186a00804591d2.html