0 Replies Latest reply on Jan 6, 2016 3:54 PM by scott3boy

    Event Subtype - What is it and how does it work?

    scott3boy

      Event Subtype - I have looked everywhere trying to understand HOW "event subtype" works.

       

      What is enabled vs disabled

       

      Why would I select any of the other options?

      add

      alert

      alert-drop

      ETC....

       

      If an event subtype shows "block" when I look at a firewall block event does it mean if on the "Data Source" I can override the subtype with one of the options above?

       

      2016-01-06 13_49_13-h1585.corp.com - Microsoft Edge.png