The white section controls the white GBUdb region.

<white on-off='on' symbol='0'>

The on-off='on' attribute enables this region and on-off='off' disables it.

The symbol='0' attribute establishes the symbol associated with this region as 0. If GBUdb overrides the pattern scanner in SNF due to the source IP falling in this region then this is the symbolic code that will be returned.

The envelope for this range is defined by edges. This section is a container for the edges that define its enveolope.

Auto-Panic Feature

The white range also contains the panic section which controls the rule-panic feature. When a message fails a relatively new pattern rule and the message source IP falls in the white range then the pattern rule will be automatically added to the internal panic list rendering it inert. In addition, telemetry about the panic will be sent to our system notifying us of the problem. The result is that the offending rule is removed and reported automatically before it can affect any messages passing through the system.

<panic on-off='on' rule-range='1000'/> 

The on-off='on' attribute enables and on-off='off' disables this feature.

The rule-range='1000' attribute establishes the range of pattern rules that are eligible for the auto-panic feature. By default, if the offending rule is one of the last 1000 rules added to the rulebase (based on the latest pattern rule that matched in the system) then the rule can be removed by the rule-panic feature.

Please email support@armresearch.com with any questions.