Incidents: Difference between revisions

Line 136: Line 136:
|global_new_connection
|global_new_connection
|This trigger is checked continuously at connection start. It can be used to report new connections with a certain layer 4 protocol and a given port range.
|This trigger is checked continuously at connection start. It can be used to report new connections with a certain layer 4 protocol and a given port range.
|mandatory
|-
|ssl_handshake
|This trigger is checked during handshake of each SSL connection.
|mandatory
|mandatory
|}
|}
340

edits