Hello,
I have doubts about the management of this module.
I understand these groups, are not editable:
* Superflows (superflow)
* Bogon (BogonIP / 4, / 8, / 10/16, etc.)
These are updated automatically?
How often or at what time updated?
These updates are configurable?
Where SIEM or enterasys takes these values?)
These other groups are editable and continental values (IP / CIDR):
* Smurfs (Smurf_Amplifier / 24)
* BOT (BOT_Control / 32)
* HostileNets (rank1, rank2, rank3, .. etc / 32)
Where SIEM or entarasys takes these values?
These values are automatically updated so?
If I add my own values to these groups, when performing an update, I lose my values?
Thanks and best regards,
Diego
