Hi,

I am trying to write a rule for the following: Generate an alert when an
IP accesses to N different vlans.

Is it possible to convert dip to its subnet within the correlation rule?
How?

Thanks,
Hakan


--
hkalyoncu
------------------------------------------------------------------------
hkalyoncu's Profile: https://forums.netiq.com/member.php?userid=3117
View this thread: https://forums.netiq.com/showthread.php?t=46399