Excluding Alerts

[tmulangaphuma]

I want to know how can one exclude Alerts with 0.0.0.0 IP address on the director.

Regards

TT

[#2]

Based on the following URL I think what you are asking is not possible

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2113/prod_configuration_guide09186a00800d9ddd.html#xtocid38

[ktimm]

I think you will have to use SigWizMenu and set Alarm Throttle to fireonce once instead of summarize. I think you will have to change ChokeThreshold to either not defined or any as well snce the sensor documentations says it will change automatically to global summarize under certain circumstances.