The event object represents a trigger in SMS Quarantine. The types of triggers are:
Name | Description |
Quarantine | An alert threshold has been crossed, a Manual Quarantine has been performed, or the Quarantine web servlet has been invoked. |
Unquarantine | A manual unquarantine has been performed, or the Unquarantine web servlet has been invoked. |
RADIUS Proxied | A RADIUS Access Request has been received on a host that is currently quarantined through SwitchDisconnect or MoveToVLAN actions. |
Trap Received | An SmsTrapQuarantineRequestAck or SmsTrapUnquarantineRequestAck has been received. |
Timer Expired | An SMS Quarantine has timed out. |
Error | A non-recoverable error has occurred |
This object has dynamic properties that can pass information. By default, the SMS
populates the two dynamic properties
SWITCH_IP and
SWITCH_PORT if IP Correlation succeeded.
Properties
Name | Type | Description |
alert | Alert | The alert that triggered this event. |
id | long | The event ID. |
ingressSwitch | Device | The switch, if IP Correlation succeeded. |
ip | String | The quarantined IP address. |
macAsInt | long | The MAC address of the end station expressed as a long value. This property is provided, in conjunction with the method int2mac() to allow alternate formatting of the MAC address. |
macIfKnown | String | The MAC address of the end station if IP correlation succeeded. |
profileName | String | The name of the profile. |
signature | Signature | The signature information for the filter. |
triggerInfo | String | Who or what initiated the response event. This value depends on the trigger method used. |
triggerMethod | String | How the response event was triggered. |
Trigger methods
Method | Info | Description |
SYSTEM | "system" | The system initiated the response event. |
POLICY | Policy name | The response policy initiated the response event. |
USER | User name | The user initiated the response event. |
IPS | Device name | An IPS initiated the response event. |
WEB | User Name | The web interface initiated the response event. |
Methods
There are no Event methods accessible from JavaScript.
Sample usage
var switchIp = event.SWITCH_IP;