Contain condition in Active list
I have a active list of Keywords, now i want to check this keywords on my IPS signature.
LIKE : name contain "active list keywords" it should check all the keyboard one by one if its match with the IPS signature then we should got an alert.
so my question is :
can we use contain condition on active list ?
if yes then how .
if not then is there any alternate way to achieve my goal?
You have an action InActiveList you can add to your rule to check the list.
The field in your activelist must be a key-field
You choose the field you want in your event to match the list.
Please use the Like button below, if you find this post useful or mark it as an accepted solution if it resolves your issue.
Thank you for your reply Henk-Jan.
But i have a very long llist of Keyword , if i put one by one keywords in contain condition its not feasible , what is the best way to do it ?