Hello Guys i have copied the "Multiple Failed Logons from Same Source IP
with Unique Usernames" ESA rule to drop some IP destinations, and its
working fine with dropping the IP Destinations but now its get triggered
even if there is one event all the...
you can set the time in the rule for 15 min or more, and then set the
first rule and use "followed by" the second rule, but this could affect
the Memory on the ESA server
