cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
245
Views
0
Helpful
3
Replies

Security monitor, manual blocking support for IDS 4.x

pdlitzel
Level 1
Level 1

Security monitor, 1.2, does not permit iniation of a block from the event viewer. Pop-up states that currently only version 3 sensors are supported. Is manual blocking support planned for a future release? If so, when?

Thanks

3 Replies 3

jsivulka
Level 5
Level 5

Hi, I was wondering if you tried blocking the signature from IDSMC instead? That would be equally effective.

Yes, I can configure blocking in the MC but also want to preserve the feature of blocking on the fly.

I know it has been discussed for possible inclusion in a future version, but I can't say whether or not it was agreed to of for which future version.

In the meantime, dropping on the fly has to be done through the IDM interface of the sensor.