The IPS quarantine response action is the SMS default response action for IPS Quarantine.
You can edit this action to specify how traffic is handled.
Procedure
- On the Responder navigation pane, click Actions.
- On the Response Actions screen, select IPS Quarantine on the Response Actions table.
- Click
Quarantine Settings, and enter the following information:
- Web Requests — Select one of the following actions: Block, Redirect to a Web server (an address is required), or Display quarantine Web page.
- Other Traffic — Select one of the following actions: Block or Permit.
- To allow quarantined hosts to access specific sites, click
Quarantine Exceptions, and then do one of the following:
- Click New to create a new listing.
- Select an existing listing, and then click Edit.
- On the Quarantined Access Dialog, enter the following information:
- Name — Specify or edit the name for the quarantined host. Use a name that is meaningful in describing the purpose of the quarantined action.
- Destination — Type the IP Address.
Important
To implement this action, add it to a policy that specifies the values that trigger the response action.