You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, the Blacklisted Flow Alert+Check is used for both ingress (remote host-> local) and egress (local -> remote). This is to request to
split the alert+check into two: Blacklist Client Contact, and Blacklist Server Contact
the first alert+check is triggered only for a remote blacklisted host that contacts a local host. the second is the opposite when a local host contacts (client) a remote blacklisted host (as a server)
the first alert+check is informative with low score (10 or so), the second is critical with max score
The text was updated successfully, but these errors were encountered:
…#8355)
* Splitting blacklisted flow alert and creating two new alerts. (#8354)
* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)
Currently, the Blacklisted Flow Alert+Check is used for both ingress (remote host-> local) and egress (local -> remote). This is to request to
The text was updated successfully, but these errors were encountered: