Views:
You can manually respond to hosts from the Active Response screen. When you manually respond to a host, the SMS enacts the Manual Response policy on the traffic flow.
To edit and enhance a Manual Response:

Procedure

  1. Add policy actions.
  2. Edit the Manual Response policy.
  3. Manually respond to hosts.
    You will need the IP address and any information about the devices you want to specifically act upon.
You can also perform a manual response by right-clicking IP addresses in generated event lists on the Events screen. Or, you can use the FileCreate Manual Response menu option on the Active Response screen.