Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 258 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What to drop?

flyingkiwi
I am receiving emails to indicate intrusion events, how am I supposed to know whether to drop the event?  Are the defaults in the rules list OK to leave or should they be modified?

Jon


This thread was automatically locked due to age.
Parents
  • 0
    There is no real default setting. It all depends what devices are present in you network. 

    eg. if you don't have any Microsoft IIS, than you normaly can drop all those packets that would aim at the IIS services. 

    and so on.

    Start at the top and work you way through to the bottom of the list.
Reply
  • 0
    There is no real default setting. It all depends what devices are present in you network. 

    eg. if you don't have any Microsoft IIS, than you normaly can drop all those packets that would aim at the IIS services. 

    and so on.

    Start at the top and work you way through to the bottom of the list.
Children
No Data