Brocade Communications Systems IP250 user manual Pseudo events, Click the Import Snort Rule button

Models: IP250

1 1753
Download 1753 pages 4.1 Kb
Page 1233
Image 1233

Pseudo events 37

2.Click the Import Snort® Rule button.

The Import Snort® Rule File dialog box displays, shown in Figure 492.

FIGURE 492 Import Snort® Rule File dialog box

3.Enter the complete path of the Snort rule file located on the Syslog server.

4.Click OK to import the Snort rules.

5.While still in the Add Event Action dialog box, continue to click Next until you advance to the Action Group - Actions pane.

6.Select the Deploy CLI Configuration check box and click Configure if you want to deploy a configuration from CLI Configuration Manager to products if the policy criteria have been met. You can only deploy a CLI configuration for IP products.

NOTE

If the CLI configuration you chose from CLI Configuration Manager contains a non-IronWare OSNetwork OS product as a target, the configuration will not be deployed to the non-IronWare OSNetwork OS product.

7.Select one of the following existing CLI configuration parameter sources from the Parameter list:

-Source IP — The source IP address of the attack.

-Source Port — The source port of the attack.

-Destination IP — The destination IP address of the attack.

-Destination Port — The destination port of the attack.

8.Continue to advance through the Add Event Action dialog box. The Summary pane of the Edit Event Action dialog box displays an overview of the e-mail configuration you are creating.

9.Review your entries and take one of the following actions:

-Click Finish to approve the configuration.

-Click Previous to return to the Action Group - E-Mail Settings pane of the dialog box.

-Click Cancel to cancel the operation.

Pseudo events

A pseudo event is a combination of different SNMP traps that you decide would constitute a single event. For example, there are two separate SNMP traps for link up and link down occurrences. You might decide that these two occurrences should be just one event.

Brocade Network Advisor IP User Manual

1181

53-1003056-01

 

Page 1233
Image 1233
Brocade Communications Systems IP250 user manual Pseudo events, Click the Import Snort Rule button