Hi,
We have enabled yahoo messenger for a group of users. But we want to stop this notification or other yahoo im related events for only this group. We want to receive this notification for any other users but not for the specific group.... IPS exclusions are not working
--------- e-mail notification that is sent is as follows ----------
A packet was identified that may be part of an intrusion attempt.
The packet was detected by the Intrusion Detection system. The matching
rule classified this as highest priority level. The packet properties
and the alert reason are:
[1:2450:0] A CHAT Yahoo IM successful logon [Classification: Potential Corporate Privacy Violation] [Priority: 1]: {PROTO006} 216.155.193.187:5050 -> 192.x.x.x:3678
--
Last WebAdmin login: admin at Tue Aug 24 08:01:37 from 192.x.x.x
System Uptime : 0 days 8 hours 16 minutes
System Load : 0.08
System Version : Astaro Security Linux 5.019
This thread was automatically locked due to age.
