Table of Contents
Advertisement
Chapter 21
Rules
Table 21-1
Rule Field
Operation
78-17020-01
Rule Fields and Arguments
Field Description and Arguments
The value of this field can be one of
the following:
Argument Descriptions
None—(Default) Defines a
•
single-line rule or a simple
condition.
•
AND—A boolean "and" used to
construct a compound condition
(two or more lines). This line and
the next line must both be
satisfied before the compound
condition is met.
OR—A boolean "or" used to
•
construct a compound condition
(two or more lines). Either this
line or the next line can be
satisfied to meet the compound
condition.
FOLLOWED-BY—Identifies a
•
compound condition (two or more
lines). specifically a sequential
order of occurrence. Also referred
to as a time conditional rule (e.g.,
Y must happen after X).The
condition of this line must be met,
and then the condition of the next
line must be met before the
compound condition is met.
User Guide for Cisco Security MARS Local Controller
Constructing a Rule
21-13
Advertisement
Table of Contents
Troubleshooting
