Hi,
We have our BRO systems configured to autoblock remote hosts if
several of our machines are scanned in a given day.
Question: how does one configure BRO to autoblock if only one host
is scanned over a specified number of times per day?
Thanks,
Ken Pon