OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[ISSForum] Event Filter

From: Robert Smith (smithrobbc.edu)
Date: Fri Dec 03 2004 - 14:49:57 CST


Hello,
 
My domain controllers have been hit fairly heavy recently by a new variant
of Gaobot, I am looking to filter and block by event and not IP, can I add a
rule to BlackIce Manager to block by event and not by IP or PORT. We are
running Desktop Protector version "enu" and "IceCap Manager 3.6" I have not
Migrated to Site Protector.
 
Thanks in Advance,
Bob Smith
_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.