mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-26 15:13:20 +02:00
34 lines
939 B
Plaintext
34 lines
939 B
Plaintext
|
{% if cs_trusted_countries | length > 0 %}
|
||
|
|
name: trusted_countries_ip_remediation
|
||
|
|
filters:
|
||
|
|
- Alert.Remediation == true && Alert.GetScope() == "Ip" && Alert.Source.Cn in ["{{ cs_trusted_countries | join('","') }}"]
|
||
|
|
decisions:
|
||
|
|
- type: ban
|
||
|
|
duration: {{ cs_ban_trusted_duration }}
|
||
|
|
on_success: break
|
||
|
|
---
|
||
|
|
name: trusted_countries_range_remediation
|
||
|
|
filters:
|
||
|
|
- Alert.Remediation == true && Alert.GetScope() == "Range" && Alert.Source.Cn in ["{{ cs_trusted_countries | join('","') }}"]
|
||
|
|
decisions:
|
||
|
|
- type: ban
|
||
|
|
duration: {{ cs_ban_trusted_duration }}
|
||
|
|
on_success: break
|
||
|
|
---
|
||
|
|
{% endif %}
|
||
|
|
name: default_ip_remediation
|
||
|
|
filters:
|
||
|
|
- Alert.Remediation == true && Alert.GetScope() == "Ip"
|
||
|
|
decisions:
|
||
|
|
- type: ban
|
||
|
|
duration: {{ cs_ban_duration }}
|
||
|
|
on_success: break
|
||
|
|
---
|
||
|
|
name: default_range_remediation
|
||
|
|
filters:
|
||
|
|
- Alert.Remediation == true && Alert.GetScope() == "Range"
|
||
|
|
decisions:
|
||
|
|
- type: ban
|
||
|
|
duration: {{ cs_ban_duration }}
|
||
|
|
on_success: break
|