TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
While the transfer of multiple E-Mail address lists from Global to Detector
Responses works for the System Agent/OS Sensor, there is known bug that
causes the Global E-Mail to Network Engine/Sensor transfer to fail.
James R Lindley
Senior Security Instructor
Internet Security Systems Inc
678-443-6323
An unquenchable thirst for Pierian water.
****************************************************************************
*******
ISS CONNECT 2000
International User Group and Information Security Summit
March 19-24, 2000 http://connect.iss.net
REGISTER TODAY!
****************************************************************************
*******
-----Original Message-----
From: Audra Eng [mailto:[EMAIL PROTECTED]]
Sent: Thursday, February 17, 2000 12:07 PM
To: Owens, Jeff; '[EMAIL PROTECTED]'
Subject: Re: real secure...email response???
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Jeff,
I just tested this capability and RealSecure has this and it works. You
need to set up the different email address in the global responses through
derive new (as you mentioned), and then save/close. Open up the local
detector responses, Merge with global Responses (a button in the box), and
check to make sure each email address is different. Now, go into your
policy and select which attack signature you want to send email on, check
the email response box, and to the right there is an arrow (drop down box)
where you select which email address you want. I tested this on RealSecure
System Agent (now called OS Sensor) - on 2 different attack signatures
sending alerts to 2 different email addresses, and it works perfectly.
Good luck! If you have problems, please check your documentation or
contact support.
Thanks,
Audra
At 01:00 PM 2/15/00 -0600, Owens, Jeff wrote:
>TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
>[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
>---------------------------------------------------------------------------
-
>
>Was wanting to know if there is a way to setup the email response to email
>different people for different attacks signatures?
>I noticed that in global responses you can derive a new email address, but
>then you are not able to merge these responses with the detector. Any way
>this is still in the makings? Thanks for your help.
>
>
>Jeff Owens
>[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>
>FishNet Security
>Ph: 816.421.6611
>http://www.fishnetsecurity.com <http://www.fishnetsecurity.com>
>
