On Fri, 1 Oct 2010 07:36:55 -0700 (PDT), blacklight <vphu...@yahoo.com> wrote: > I just spoke with my boss - the method I ran by you is cumbersome and > lacks scalability. Is there a way to get whitelisting implemented at > the agent level?
I'm a bit confused. The rule method is easy to implement on the manager and is effective against the one host, which I understand is your goal. Whitelisting the IP for all active responses is also easy to implement on the manager and easy to do. Where's the scalability problem? -- [I] Immutable Security Information Security, Privacy and Personal Liberty http://www.immutablesecurity.com