Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jose_Luis_Mart1
Explorer

"Add source IP to Quarantine list" in Aggressive Aging

Dear all,

While fine-tuning Aggressive Aging in a customer configuration, we've found that the Aggresive Aging IPS signature includes a parameter name "add souce IP to quarantine list".

The thing is that there are no details about this parameter. Is it a permanent block? Only for x seconds/minutes/hours? Is it configurable? Does it use SAM?

Does anyone know a bit more about this?

Thanks!

0 Kudos
3 Replies
PhoneBoy
Admin
Admin

Where are you seeing this option?

I don't see it in either R80.x or R77.30 when I am looking at the Aggressive Aging signature in IPS (R77.30) or Inspection Settings (R80.x).

0 Kudos
Alejandro_Bayo
Explorer

Hi,

I think that Jose Luis is talking about this option (R77.30):

Aggressive Aging options

I've no idea about how this option work...

Best Regards,

Alex B.

0 Kudos
PhoneBoy
Admin
Admin

This option doesn't show for me in R77.30 or R80.x

Will have to ask around on both counts.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events