|
-
January 5th, 2007, 04:52 PM
#19
oookay
That's kinda like using a sledgehammer to tap in a nail...
Shutting off all the alerts isn't really the answer, proper tuning is. Your global line should be configured to reflect the majority of the http server present on your network. Then any deviations from that need to have their own lines. (Different ports, different server types).
Shutting off the alerts, yes, gets rid of the alerts and just makes http_inspect normalize traffic, however, you are not seeing some of the benefit of http_inspct, in that it has its own alerting!
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|