It should be noted that all three of the rules have improper syntax and
won't work as written. Direction requires the values to be in quotes
since it's a text field.Outbound LDAPdirection='outbound' && service=389
Outbound LDAPSdirection='outbound' &...
Can we get the status on the Jira? This would be a great value add.
Since it's already being leveraged by RSA feeds I feel like having it
work for custom feeds would be a nice improvment.
Michael Do you know if this made it into the 11.4 release? I am wagering
no since I haven't seen anything new in a while, but I would really like
to know.