HP ProCurve Threat Management Solution Implementation Guide 2009-05

3-128
HP ProCurve Network Immunity Manager with a Third-Party IDS/IPS
Step 3: Respond to Threats
3. In the Configuration Changes section of the Global: Policy Management window, make sure
the Enable Policy Actions option is cleared.
Figure 3-137. PCM+ Global: Policy Management Window
4. Click OK.
Second and Subsequent Times Through the Process
This section describes how to configure actions for Non-ProCurve Security Devices alerts. This
section provides examples of the following types of alerts:
■ MAC lockout
■ Enable/disable port
■ Rate limiting
■ Quarantine VLAN
Task: Select MAC Lockout as an Action
If your third-party device or NIM detects suspicious behavior, you may want to prevent the
offender from accessing your network. You can use MAC lockout to block the MAC address
or addresses associated with the suspicious traffic.