[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [ISSForum] Request Server Sensors to Ignore ALL Traffic from Approved ISS Inet Scanners



Yes, you can create something like filters, editing trust.pair and
trust.issue parameters in \ISS\issSensors\hqent04\BlackICE\Blackice.ini.
Now these parameters are not available from GUI, but ISS said that it will
be in nearest future (hope it will be so).
You can find more info on:
http://documents.iss.net/literature/BlackICE/BI-AAG_70.pdf pp 24,25
http://documents.iss.net/literature/RealSecure/RS_SvrSensor_Adv_Tuning_Reference_Windows.pdf
http://documents.iss.net/literature/RealSecure/nsAdv_Tuning_Reference.pdf

Good luck!
---
Best regards, Sergey V. Soldatov.
Information security department.


                                                                                                                    
              "Dan Widger"                                                                                          
              <DWidger@xxxxxxxxxxx>            To:       <issforum@xxxxxxx>                                         
              Sent by:                         cc:                                                                  
              issforum-bounces@xxxxxxx         Subject:  [ISSForum] Request Server Sensors to Ignore ALL Traffic    
                                                from     Approved ISS Inet Scanners                                 
                                                                                                                    
              15.11.2004 21:45                                                                                      
                                                                                                                    
                                                                                                                    




Is there a ways to tell a(ll) ISS Server Sensors to ignore any traffic
from an (authorized) ISS Internet Scanner?



Dan Widger

713\892-3471



_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.





_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.