One packet which contains a worm and the traffic is a legitmate one , hence my Firewall allowed the packet.My IDS detected the maliciousy activity and it is alarmed. I want automatically there should an ACL has to be formed in my Firewall/Router. How this scenario practically configured by using event viewer/IDS Manager. Pls explain.