Hello,
I have doubts about the management of this module.
I understand these groups, are not editable:
* Superflows (superflow)
* Bogon (BogonIP / 4, / 8, / 10/16, etc.)
These are updated automatically?
How often or at what time updated?
These updates are configurable?
Where SIEM or enterasys takes these values?)
These other groups are editable and continental values ​​(IP / CIDR):
* Smurfs (Smurf_Amplifier / 24)
* BOT (BOT_Control / 32)
* HostileNets (rank1, rank2, rank3, .. etc / 32)
Where SIEM or entarasys takes these values?
These values ​​are automatically updated so?
If I add my own values ​​to these groups, when performing an update, I lose my values​​?
Thanks and best regards,
Diego
