cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1636
Views
1
Helpful
1
Replies

SourceFire - Modify IPS rule suppression based on host profile?

Chris Libby
Community Member

Is it possible to modify what alerts get generated or suppressed based on the host profile?  For example, if my DMZ Host is Windows then do not generate alerts specific to Linux.

1 Reply 1

evan.chadwick1
Level 5
Level 5

check out correlation rules. Very powerful

Review Cisco Networking for a $25 gift card