Tuesday, June 13, 2006

Q: How do I enter a list of IPs to be excluded in the portscan detection preprocessor?

A:
Edit your policy, and choose "portscan detection". Int ehIP Adresses to Exclude field, enter the IPs in CIDR format, comma-delimited, no brackets, like this: 10.10.10.1/32,10.10.2.3/32,192.168.34.7/32

0 Comments:

Post a Comment

<< Home