The event object represents a trigger in SMS Quarantine. The types of triggers are:
| Name | Description |
| Quarantine | An alert threshold has been crossed, a Manual Quarantine has been performed, or the Quarantine web servlet has been invoked. |
| Unquarantine | A manual unquarantine has been performed, or the Unquarantine web servlet has been invoked. |
| RADIUS Proxied | A RADIUS Access Request has been received on a host that is currently quarantined through SwitchDisconnect or MoveToVLAN actions. |
| Trap Received | An SmsTrapQuarantineRequestAck or SmsTrapUnquarantineRequestAck has been received. |
| Timer Expired | An SMS Quarantine has timed out. |
| Error | A non-recoverable error has occurred |
This object has dynamic properties that can pass information. By default, the SMS
populates the two dynamic properties
SWITCH_IP and
SWITCH_PORT if IP Correlation succeeded.
Properties
| Name | Type | Description |
| alert | Alert | The alert that triggered this event. |
| id | long | The event ID. |
| ingressSwitch | Device | The switch, if IP Correlation succeeded. |
| ip | String | The quarantined IP address. |
| macAsInt | long | The MAC address of the end station expressed as a long value. This property is provided, in conjunction with the method int2mac() to allow alternate formatting of the MAC address. |
| macIfKnown | String | The MAC address of the end station if IP correlation succeeded. |
| profileName | String | The name of the profile. |
| signature | Signature | The signature information for the filter. |
| triggerInfo | String | Who or what initiated the response event. This value depends on the trigger method used. |
| triggerMethod | String | How the response event was triggered. |
Trigger methods
| Method | Info | Description |
| SYSTEM | "system" | The system initiated the response event. |
| POLICY | Policy name | The response policy initiated the response event. |
| USER | User name | The user initiated the response event. |
| IPS | Device name | An IPS initiated the response event. |
| WEB | User Name | The web interface initiated the response event. |
Methods
There are no Event methods accessible from JavaScript.
Sample usage
var switchIp = event.SWITCH_IP;
