Jump to content

Macchia

Members
  • Posts

    2
  • Joined

  • Last visited

Kudos

  1. Upvote
    Macchia gave kudos to JamesR in Assistance with Configuring Network-Based Exclusion Rule in ESET Inspect   
    Just sharing how I would exclude this.  It super similar to Marcos'.  Main difference is that I am using "IpAddressV4" which should work for any networking event.  The "DestinationIpAddressV4" may be restricted to Firewall IDS network connections...admittedly, I haven't tested yet.
    The operation type of "TcpIpConnect" is for outbound connections, and is my preferred method of restricting to outbound.
    If I wanted inbound, I would use the operation type of "TcpIpAccept" instead.


     
    <operations> <operation type="TcpIpConnect"> <operator type="and"> <condition component="Network" property="IpAddressV4" condition="is" value="13.69.128.10"/> </operator> </operation> </operations>  
  2. Upvote
    Macchia gave kudos to Marcos in Assistance with Configuring Network-Based Exclusion Rule in ESET Inspect   
    Would this work for you?
    <operation type="TcpIpConnect"> <condition component="Network" property="DestinationIpAddressV4" condition="is" value="13.69.128.10"/> </operation>  
×
×
  • Create New...