cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1770
Views
0
Helpful
2
Replies

Outbreak rule status

steven_geerts
Level 1
Level 1

Hello,

We have configured our C600s to send an alert message when the Outbreak rules change. since there are a lot of rule changes we also receive a lot of messages. I'm looking for an alternative to see what Outbreak rules are currently active.
I should expect to find such overview on the Virus Outbreaks monitor page but can not find it (or I might not interpret the outbreak details lists correctly).
I have been searching the log files to see if the information provided within the E-mail alerts is there but could not find anything there.

of course we could write some code that tears the information from the E-mail alerts but that would be the last thing (or nearly the last thing) I like to try.

anyone any ideas?

2 Replies 2

jaigill
Cisco Employee
Cisco Employee

You can see the outbreak rules on the 'security services -> Virus Outbreak Filter' page in GUI.

You can also find the list of currently published rules on the supportportal at www.ironport.com/support. Check the 'Virus Outbreaks' link on the left after you login into the portal.

steven_geerts
Level 1
Level 1

Thax, that was exacly what I was looking for!

Steven