When you configure a response filter in the Network IPS Local Management Interface for a data loss prevention (DLP) user-combined or user-defined event, you see different signatures than the ones in the DLP lists.
User-combined or user-defined event in the list | User-defined event signature | User-combined event signature |
---|---|---|
First event | Content_Analyzer_User_defined_0 | Content_Analyzer_User_combined_0 |
Second event | Content_Analyzer_User_defined_1 | Content_Analyzer_User_combined_1 |
Third event | Content_Analyzer_User_defined_2 | Content_Analyzer_User_combined_2 |
Fourth event | Content_Analyzer_User_defined_3 | Content_Analyzer_User_combined_3 |
Fifth event | Content_Analyzer_User_defined_4 | Content_Analyzer_User_combined_4 |
Sixth event | Content_Analyzer_User_defined_5 | Content_Analyzer_User_combined_5 |
Seventh event | Content_Analyzer_User_defined_6 | Content_Analyzer_User_combined_6 |
Eighth event | Content_Analyzer_User_defined_7 | Content_Analyzer_User_combined_7 |