1 Reply Latest reply: Apr 25, 2012 2:57 PM by smoove RSS

    IPS Global correlation - Network Participation

    smoove

      Hey guys,

       

      Is there a best practice for when choosing the network participation to either Full or Partial under the Global Correlation settings for an IPS?

       

      I know that Partial leaves out important information such as Victim IP address when speaking with the global database and that Full participation basically just sends all data.

       

      Thanks in advance!