Quantcast
Channel: Symantec Connect - ブログエントリ
Viewing all articles
Browse latest Browse all 5094

How can I ignore IPS events that I do not want to see?

$
0
0

Problem

You know the IPS event is present and know why it is occurring, but do not want to keep being bombarded with the events.
 

Solution

Create a log Config policy

In order to ignore IPS events you don’t want to see you will need to create a new log rule.

  1. Go to the Configs tab

Screen Shot 2015-07-14 at 10.24.43 AM.png

  1. Select Prevention

Screen Shot 2015-07-14 at 10.25.31 AM.png

  1. Select ADD

Screen Shot 2015-07-14 at 10.26.49 AM.png

  1. Create an Empty Policy

Screen Shot 2015-07-14 at 10.27.30 AM.png

  1. Select Edit

Screen Shot 2015-07-14 at 10.28.09 AM.png

  1. Select Log Rules
    Screen Shot 2015-07-14 at 10.29.08 AM.png
  1. Clear the list hitting the red X
    Screen Shot 2015-07-14 at 10.29.51 AM.png
  1. Click apply then okay
  1. Select the policy then click apply
    Screen Shot 2015-07-14 at 10.30.39 AM.png
  1.  Apply the policy to a client or group
    Screen Shot 2015-07-14 at 10.31.21 AM.png
  1.  Events should no longer trigger for that client or group

Viewing all articles
Browse latest Browse all 5094

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>