cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1186
Views
1
Helpful
1
Replies

SourceFire - Modify IPS rule suppression based on host profile?

Chris Libby
Level 1
Level 1

Is it possible to modify what alerts get generated or suppressed based on the host profile?  For example, if my DMZ Host is Windows then do not generate alerts specific to Linux.

1 Reply 1

evan.chadwick1
Level 1
Level 1

check out correlation rules. Very powerful

Review Cisco Networking for a $25 gift card