cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1099
Views
0
Helpful
1
Replies

SourceFire - Modify IPS rule suppression based on host profile?

Chris Libby
Beginner
Beginner

Is it possible to modify what alerts get generated or suppressed based on the host profile?  For example, if my DMZ Host is Windows then do not generate alerts specific to Linux.

1 Reply 1

evan.chadwick1
Beginner
Beginner

check out correlation rules. Very powerful

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers