SIGN:PROGRAM:CHANGE

In this section we will configure the Program change alert.

The detection is enabled by default and works according to the following parameters.

Set the maximum steps number for ethernet-ip online edits

Product Guardian
Syntax conf.user configure probe protocol ethernetip online_edits_max_steps <n_steps>
Description When online edits are detected in ethernet-ip traffic, this is the maximum number of steps for the alert to be emitted (even if no commit has been seen yet).
Parameters n_steps: The maximum number of steps for the alert to be emitted (default: 10).
Where CLI
To apply In a shell console execute: n2os_ids_stop