[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISSForum] Signature


How can I define a signature that will block the activities which came from
same IP address to certain web server with more than 100 HTTP get request in
one second. When exceeding 100 connections per second from same source I
want to drop all further connections from that source. I couldn't find any
pre-defined signature that I can do this in RS Network Sensor 7.0. Is it
possible to do this with ISS 7.0?

Best Regards

ISSForum mailing list

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo