Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

About the IPS Attack
Responses window
Chapter 20: IPS Attack and System Event Responses
Creating IPS attack responses
This window displays the currently configured IPS attack responses. You can
perform the following actions in this window:
• Filter the list of IPS attack responses — To modify the displayed list, rightclick
a column name and select from the current list of filters or create a
custom filter. The list will then display only IPS attack responses of that
type.
• Configure a new IPS attack response — To configure a new IPS attack
response, click New. The Add Attack Response Wizard appears.
• Modify an existing IPS attack response — To modify an existing IPS attack
response, select the appropriate item within the list and click Modify. For
information on modifying specific fields, see “Modifying an IPS attack
response” on page 566.
• Delete an existing IPS attack response — To delete an IPS attack
response, select the list item you want to delete and then click Delete.
• Disable/enable an IPS attack response — The disable and enable options
depend on an IPS attack response’s current status. If one or more
responses with the same status are selected, their status can be changed
to its opposite (for example, if all selected responses are enabled, you may
disable all of them). When multiple responses with mixed statuses are
selected, the only available action is enabling the responses.
• Create the e-mail list to notify in the event of an attack — To create or
modify the list of e-mail addresses to notify if any IPS attack triggers an
alert, click Response Settings. See “Configuring the e-mail settings” on
page 571 for more information.
565