With IPS there is a simple mechansme to activate new (and updated???) entries based on a few simple crieria.
However we notice that customers are not please with this and want a more granular setting.
Is there away to automate this? I could not find this in the API manual.
Say I want to build a matix based on Confidence + Severity + Performance Impact and descide for each combination wether or not I want it active. Then I would like to automate this to adjust each IPS protection based on the rules in the matrix.
I would like to automate this in a way like this:
1. Get a list of IPS protections with the 3 variables above.
2. Base on my matrix either enable or disable each protection.
My questions:
1. Is this description clear enough?
2. Can this be done?
<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>