HP ProCurve Threat Management Solution Implementation Guide 2009-05

4-81
HP ProCurve Network Immunity Manager with HP ProCurve Security Devices
Step 3: Respond to Threats
Second and Subsequent Times Through the Process
This section describes how to configure actions for a variety of alerts, including ProCurve
NBAD Services alerts, ProCurve Security Devices alerts, ProCurve Wired Devices, and Pro-
Curve Wireless Devices. This section provides examples of the following types of alerts:
■ MAC lockout
■ Enable/disable port
■ Rate limiting
■ Quarantine VLAN
■ Dynamic mirroring
This section also provides instructions for configuring a policy.
Task: Select MAC Lockout as an Action
If suspicious behavior is detected on your network and an alert is triggered, you might want
to prevent the offender from accessing your network. You can use MAC lockout to block the
MAC address or addresses associated with the suspicious traffic.
To configure MAC lockout as an action, complete the following steps:
1. Open Policy Manager by clicking Tools > Policy Manager.
2. In the navigation tree, select Actions.
Figure 4-58. PCM+ Manage Actions Window in Policy Manager
3. Click New in the Manage Actions window. The Create New Action window is displayed.