How to remove a threshold

[Tim Guy]

I had two internal users have a teams meeting that kicked off "alert.signature: ET INFO Session Traversal Utilities for NAT (STUN Binding Response)" which then blocked all the Microsoft Teams Servers.

I went into the rule and set a threshold on the first of many ip addresses that were blocked as the teams call moved around the MS estate as each one got blocked.

Then I realised that maybe that wasnt the best way and I was going to set a threshold on all of the MS Teams range BUT I cant work out how to remove a set threshold, 

I can add them but how do I remove them from the rule?

Tim

[Peter Manev]

Hi ,

You should be able to see them in the “Rules” tab in Administration.

You can do the adjustments from there.

Thank you 

-- 

Regards,

Peter Manev 

On 6 Jul 2023, at 14:37, Tim Guy <timg...@gmail.com> wrote:



--
Discord: Let's talk about SELKS on
https://discord.com/channels/911231224448712714/911238451842666546
Wiki: https://github.com/StamusNetworks/SELKS/wiki
GitHub: https://github.com/StamusNetworks/SELKS
Blog: https://www.stamus-networks.com/blog
Twitter: @StamusN
---
You received this message because you are subscribed to the Google Groups "SELKS" group.
To unsubscribe from this group and stop receiving emails from it, send an email to selks+un...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/selks/CAD61_NVc1%2BTrTmUCU4A4iq2pSZt_xRzu_hkWWo9jCxeiqie9-Q%40mail.gmail.com.