cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Marc_Lampo
Nickel

destination portnumber in alert email / user alert ?

Hello, while activating alert email / user alert (to get control over the content of the email) I notice the destination port number is not available anywhere. It is either replaced by the name of the service that matches (eg : if dport == 25 --> svc == smtp) or by a, otherwise meaningless ?, name (eg if dport not described by any service object, I see : cp_tcp_A936BBAC_EBC3_4F18_B3CC_A63365F07477 Anybody an idea how to get to the destination portnumber ? Or : globally, how to turn off address and portnumber conversion to names altogether ? Thanks ! Kind regards, Marc
0 Kudos
2 Replies
Highlighted

Re: destination portnumber in alert email / user alert ?

Yes, using GuiDBEdit flip the global property variable alert_resolve_port from true to false and perform a Install Database operation.

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com
0 Kudos
Marc_Lampo
Nickel

Re: destination portnumber in alert email / user alert ?

Many thanks !

But "Install Database" is not enough, as it turns out.
I had to do cpstop ; cpstart to make the change visible.
That variable is obviously only read when starting the processes.