Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Figure 232: System
Responses Modify window
Chapter 20: IPS Attack and System Event Responses
Creating system responses
• Disable/enable a system response — The disable and enable options
depend on a system response’s current status. If one or more responses
with the same status are selected, their status can be changed to its
opposite (for example, if all selected responses are enabled, you may
disable all of them). When multiple responses with mixed statuses are
selected, the only available action is enabling the responses.
• Create the e-mail list to notify in the event of a system event — To create
or modify the list of e-mail addresses to notify if any system event triggers
an alert, click Response Settings. See “About the Response Settings: New/
Modify window” on page 577 for more information.
Modifying a system response
When you modify a system response, the following window appears.
About the Modify System Responses: Event tab
Use this tab to change this system response’s event type. An event is generally
defined as an important, generally unexpected, change in your system. Each
event type identifies a different set of system changes.
1 Select the event type for which you want Sidewinder G2 to send out a
response. A complete list is provided in Table 40.
To create additional system event types, see “Configuring new event types”
on page 578.
2 Click OK or the next tab you want to modify.
Note: For descriptions of the audit severities, see “Viewing IPS attack and system
event summaries” on page 521.
573