Skip to main content

Ignore when another rule matches

When a building block or rule matches it's specific fields, do not fire matched events

and NOT when a subset of at least this number of these rules, in order, from the same|different source IP to the same destination IP, over this many seconds