Alert!!

Alert!!

Hi,

I have been testing Firewall Log Analyzer for the last 2 weeks. I would like to suggest something to the setting of alerts.

Right now alert can be set only as
<"Severity/Attack/etc .."> <"is/isnt/etc.."><string>

that means I have to give some entry as string..But it would be nice if a condition like ANY can be set. So the alert would look like

<"Severity/Attack/etc .."> <"is/isnt/etc.."><"[any/{string}]">

I will tell you the reason because I want to set an alert which gets triggered when an Attack is found(Attack reports are generating) or a virus is detected or a Security flaw is found..etc..It is not possible for me to name all the kind of Attack criteria like Bad packet,small PMTU etc..So it would be nice if an ANY condition is set, so that alerts will be triggered when an entry comes in attack reports.The case is same for all other reports also like security,virus etc..

After all this is a wonderful product and I am looking forward for the 4020 build.

Thanks,
Nibin Varghese















                New to ADSelfService Plus?