Table 9-4 Offense Rule Response Parameters (continued)
Parameter
Offense Name
Blocking Rule
Email
Enter e-mail address
to notify
STRM Administration Guide
Description
Select one of the following options:
This information should contribute to the
•
name of the associated offense(s) - Select this
option if you wish the Event Name information to
contribute to the name of the offense(s).
This information should set or replace the
•
name of the associated offense(s) - Select this
option if you wish the configured Event Name to
be the name of the offense(s).
Specify the blocking rules you wish to apply to this
event. The list contains all blocking options available
for the selected Resolver Type. The possible options
include:
Source to all
•
Source to destination
•
Source to destination on detected port
•
Destination to all
•
Destination to source
•
Destination to all on detected port
•
All source and destination traffic
•
Select the check box to display the email options. By
default, the check box is clear.
Specify the e-mail address(es) to send notification if
the event generates. Separate multiple e-mail
addresses using a comma.
Creating a Rule
191