Hello!
How I can exclude a subnet in a ESA Rule? Example: ip_src IS NOT "10.0.0.0/8", i try this option and substituting the octets with "x,*,%" and not work, can you help me?
Hello!
How I can exclude a subnet in a ESA Rule? Example: ip_src IS NOT "10.0.0.0/8", i try this option and substituting the octets with "x,*,%" and not work, can you help me?
Try:
ip_src NOT REGEXP “10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}”
Please put that in notepad first as the quotes in email may be “smart quotes”.
Sent from my iPhone
You can try this instead:
NOT matchLike(ip_src, "10.0.0.%")
There is also a matchRegex helper function both examples shown in link below in Example 7:
https://community.rsa.com/docs/DOC-80032
Sent from my iPhone
Try:
ip_src NOT REGEXP “10\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}”
Please put that in notepad first as the quotes in email may be “smart quotes”.
Sent from my iPhone