How do I add a condition in VigilEnt Security Agent for Cisco Secure IDS? (NETIQKB30599)

goal
How do I add a condition in VigilEnt Security Agent for Cisco Secure IDS?

fact
VigilEnt Security Agent for Cisco Secure IDS

fix

To add a condition to a rule:

1. Right-click Criteria, select Create new condition on, and select an item on which to create a condition. The appropriate dialog box is displayed for the selected criterion. 

2. Enter the values for the criterion, and click OK. The condition appears in the Criteria pane. 

3. Repeat Step 1 and Step 2 for each condition that you want to include in the rule.

4. Right-click Criteria and select All conditions satisfied or Any condition satisfied to specify the conditions that must be satisfied to generate an alert.

note

For information about how to create a new rule for VigilEnt Security Agent for Cisco IDS, refer to the following knowledge base article.

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30597

For information about how to edit an existing rule for VigilEnt Security Agen for Cisco IDS, refer to the following knowledge base article.

https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB30598

Formerly known as NETIQKB30599