Creating user-defined events for Proventia Content Analyzer module

Technote (FAQ)


Question

How do you create user-defined events for Proventia Content Analyzer module?

Cause

Proventia Content Analyzer is a module introduced with XPU 27.120. It uses the data inspection and analysis capabilities in Proventia Network Intrusion Prevention System (IPS) appliances to find personal identifiable information or other confidential information moving through and out of your network.

Answer

The Proventia Content Analyzer module supports up to 8 user-defined signatures that will look for specific patterns in traffic flow. This module is not enabled by default.

For detailed instructions on the use of this feature, see the Proventia Content Analyzer Guidelines documentation included below.

Note: The Proventia Content Analyzer module was migrated in IPS firmware 4.1 from a set of signatures under the Security Events policy to the new set of signatures under the Data Loss Prevention policy. For more information on the Data Loss Prevention configuration, please see the Data Loss Prevention documentation.


IBM Network IPS Documentation IBM Infrastructure Security Forums IBM Security Support Channel on YouTube IBM Fix Central Fixes and Updates IBM Security License Key and Download Center Subscribe to My Notifications for Important Product Alerts IBM Security Contact Support

Related information

Content Analyzer Guide


Cross reference information
Segment Product Component Platform Version Edition
Security Proventia Virtualized Network Security Platform Not Applicable Firmware 3.3, 4.1, 4.3, 4.4, 4.5, 4.6

Historical Number

4501

Document information


More support for:

IBM Security Network Intrusion Prevention System

Software version:

1.8, 2.5, 3.3, 4.1, 4.3, 4.4, 4.5, 4.6, 4.6.1, 4.6.2

Operating system(s):

Firmware

Reference #:

1436075

Modified date:

2010-06-04

Translate my page

Content navigation