The most recent content from our members.
It would be useful if the Block IP action worked the way the "Send Popup Message" active response does. In our current configuration one of our firewalls will automatically block attacker IP addresses but we would like to then update the rest of the firewalls with those blocked addresses. If the block IP command does a…
I'm somewhat new to LEM and was looking at using the Block IP active response in a rule. I don't see any option in the rule builder to select which of the LEM connected firewalls I want to block the IP on. If I start this rule will it attempt to block the specified IP on all of my firewalls or just the one the log came…
It looks like you're new here. Sign in or register to get started.