Chapter 5 Events: Logs, Traffic Streams, Reports

From the Quarantined Addresses page, you can:

View and search for information on quarantined addresses

Force an address into quarantine

Remove all or selected addresses from quarantine

The following figure shows the Quarantine Addresses page:

Figure 5–3: Quarantined Addresses Page

For each quarantined address, the Quarantined Addresses page provides the following information:

Table 5–11: Quarantined Address Table

Column

Description

 

 

 

 

IP address

The IP address of the host in quarantine.

 

 

Reason

Identifies the IPS filter that triggered the quarantine. Click the filter

 

link to display and manage the filter.

 

 

For additional details, see the following sections:

“Configure a Quarantine Action Set” on page 51

“Search for quarantined addresses” on page 114

“Force IP address into quarantine” on page 115

“Remove IP addresses from Quarantine” on page 115

Search for quarantined addresses

STEP 1

STEP 2

From the LSM menu, select Events > Managed Streams > Quarantined Addresses

Enter a valid IP address for the quarantined host.

To view all quarantined addresses, the IP Address field must contain the value 0.0.0.0. This value is equivalent to the value any.

114X Family LSM User’s Guide V 2.5.1