Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 

"Add source IP to Quarantine list" in Aggressive Aging

Dear all,

While fine-tuning Aggressive Aging in a customer configuration, we've found that the Aggresive Aging IPS signature includes a parameter name "add souce IP to quarantine list".

The thing is that there are no details about this parameter. Is it a permanent block? Only for x seconds/minutes/hours? Is it configurable? Does it use SAM?

Does anyone know a bit more about this?

Thanks!

Tags (1)
0 Kudos
Reply
3 Replies
Admin
Admin

Where are you seeing this option?

I don't see it in either R80.x or R77.30 when I am looking at the Aggressive Aging signature in IPS (R77.30) or Inspection Settings (R80.x).

0 Kudos
Reply
Explorer

Hi,

I think that Jose Luis is talking about this option (R77.30):

Aggressive Aging options

I've no idea about how this option work...

Best Regards,

Alex B.

0 Kudos
Reply
Admin
Admin

This option doesn't show for me in R77.30 or R80.x

Will have to ask around on both counts.

0 Kudos
Reply