OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: RE:Subscribing to the digest version of ISS Forum
From: Mark.Teicherpredictive.com
Date: Sun Apr 16 2000 - 11:40:39 CDT

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

Yes, they do, but I cannot seem to find the URL to the Mailing list
subscription page. ISS just recently re-did their web page, and it seems
pretty nice and all, but I like simple web pages ones that still work the
Lynx browser or the Apple Newton WebBrowser. Yes, some of us still have a
Newton .. :)
Excellent Market strategy I might add. The KISS method need not apply..
(Only kidding -:)

http://xforce.iss.net/maillists/ <-- you can select what mailing lists you
would like to subscribe or unsubscribe from there. There is a digest
command you can send to majordomo though. It is not indicated on the
webpage that one can subscribe to the ISSForum digest version ???

barbara.chalefatt.net
04/16/00 09:08 AM

 
        To: Mark.Teicherpredictive.com
        cc:
        Subject: RE: IPDuplicate -reply - DO NOT FILTER EVENT -reply

Mark,

Sorry to bother you with a trivial
question.

Do you know whether ISS forum has
a digest format? I travel during
the week, and am drowning in e-mail
from this group. 

--
Barbara

>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message 
to
> majordomoiss.net  Contact issforum-owneriss.net for help with any 
problems!
> 
----------------------------------------------------------------------------
>
> Now, that is an interesting statement, since as you say some devices may
> accidental trigger RS events, one must be very aware of the network
> architecture and how the ISS RealSecure Policy is crafted.  One can
> trigger many false positives by having such protocols as HSRP or other
> High Availability or IP-Sharing devices on a network.  Look at the 
details
> of the IPDuplicate event, if it caused by the use of these protocols, 
you
> can certainly create an exception list with a custom connection event 
and
> not report the event if it is caused by the network protocols that are
> deployed.
>
> There are simpler solutions in solving the statement below, but that 
will
> be left as an exercise for the reader/lurker.. :)
>
> /m
>
>
>
>
> "Mark Clancy" <mark.clancymindspring.com>
> Sent by: owner-issforumiss.net
> 04/08/00 08:57 AM
>
>
>         To:     <issforumiss.net>
>         cc:
>         Subject:        RE: IPDuplicate -reply - DO NOT FILTER EVENT
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
> to
> majordomoiss.net  Contact issforum-owneriss.net for help with any
> problems!
> 
----------------------------------------------------------------------------
>
> One other thing is if you have devices that are in high availability 
modes
> like routers with HSRP that can trigger RS events. Same IP different MAC
> addresses.
>
> As noted before you should investigate, but this might help narrow it
> down.
>
> -Mark
>
>
>
>
>
>
>