It would be very useful for SEP to be capable of Logging audit events but NOT notify/email, eg [SID: 20653] Audit: VNC Server Banner. This is the Intrusion Prevention level 1 type event, info and above. I opened a case and was told that currently the system can either "Log and Notify" or "Not log and Not notify" only.
↧