Specifications

Match Selected − The Sender ID is compared against one or more Sender Identifiers selected
from the list.
•
Exclude Selected − The Sender ID matches if it is not one of the Sender Identifiers selected
from the list.
•
Use the Edit List button to open a window where you can add or remove sender identifiers to use in
your rule definitions.
Select Sender Names
This area lets you select one or more sender names to be compared against the sender name returned
in the event, to determine whether or not to use the Search Scope specified as the ASM search scope.
Match Any − This is an unconditional match for the Sender Name.•
Match Selected − The Sender Name is compared against one or more Sender Names selected
from the list.
•
Exclude Selected − The Sender Name matches if it is not one of the Sender Names selected
from the list.
•
Use the Edit List button to open a window where you can add or remove sender names to use in your
rule definitions.
Select Threat Subnets
This area lets you select one or more subnets to be compared against the subnet returned in the event,
to determine whether or not to use the Search Scope specified as the ASM search scope.
Match Any − This is an unconditional match for the Threat Subnet.•
Match Selected − The Threat Subnet is compared against one or more Threat Subnets
selected from the list.
•
Exclude Selected − The Threat Subnet matches if it is not one of the Threat Subnets selected
from the list.
•
Use the Edit List button to open a window where you can add or remove threat subnets to use in your
rule definitions.
Search Scope
This drop−down list lets you select a Search Scope Group that will be used as the ASM search scope
when an event matches the conditions defined for this rule.
Automated Security Manager Help
Create/Edit Search Scope Rule 167