You can manually respond to hosts from the Active Response screen. When you manually
respond to a host, the SMS enacts the Manual Response policy on the traffic flow.
To edit and enhance a Manual Response:
Procedure
- Add policy actions.
- Edit the Manual Response policy.
- Manually respond to hosts.
You will need the IP address and any information about the devices you want to specifically act upon.
You can also perform a manual response by right-clicking IP addresses in generated
event lists on the Events screen. Or, you can use the
menu option on the Active Response screen.