Hi,
Im currently playing with quarantine setting through IPS and SMS. What i have noticed is SMS quarantine have TIMEOUT and ESCALATION feature but IPS quarantine does not have TIMEOUT and ESCALATION feature
IPS quarantine timeout the quarantined host every 1 hours by default and share the quarantined host with other IPS (not sure how it does it with specific devices
Is there any way to increase the quarantine timeout period on IPS Quarantine.
Also is there way to stop logging events only once the host is been quarantined ?