cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

615
Views
0
Helpful
1
Replies
duyennv10
Beginner

Trust host in Sourcefire IPS

We have deployed sourcefire 7125 with defence center 1500 recently.

We get alot of alert through email about 10.1.1.10 with port 445, 10.1.1.10 is our share file server so that is normal to open that port in the server.

How could we classify that 10.0.0.0/8 is allowed connect to 10.1.1.10:445 and wont get email alert any more.

Thank you!

1 ACCEPTED SOLUTION

Accepted Solutions
Marvin Rhoads
VIP Community Legend

Create a new rule in your Access Control Policy with those addresses in it and action "Trust". Make sure it is above any more general rules. Save and deploy.

View solution in original post

1 REPLY 1
Marvin Rhoads
VIP Community Legend

Create a new rule in your Access Control Policy with those addresses in it and action "Trust". Make sure it is above any more general rules. Save and deploy.

View solution in original post

Content for Community-Ad