Tuning Using Custom Rules Wizard - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CATEGORY OFFENSE INVESTIGATION GUIDE REV 1 Manual
Category offense investigation guide
Hide thumbs
Also See for SECURITY THREAT RESPONSE MANAGER 2008.2 - CATEGORY OFFENSE INVESTIGATION GUIDE REV 1:
- Administration manual (370 pages) ,
- Manual (228 pages) ,
- Getting started (14 pages)
Table of Contents
Advertisement
Step 5
Tuning Using Custom
Rules Wizard
Step 1
Step 2
Step 3
Step 4
Click Tune.
STRM will no longer create additional offenses for this source IP address when
performing normal VA or network management tasks.
To tune reconnaissance activity using the custom rules wizard:
In the navigation bar of the Offense Manager, click Rules.
The Rules interface appears.
Using the Display drop-down list box, select Building Blocks.
In the Block Name list, locate the Default-BB-HostDefinition: VA Scanner
Source IP building block.
Click Edit.
The Rules Wizard appears.
Category Offense Investigation Guide
How do I Tune a Reconnaissance Offense?
67
Advertisement
Table of Contents
