Symantec Security Expressions Server - Manual (Page 57)

Audit-On-Connect
49
DistributionMethod=Round Robin
Comment=Home office ip addresses
[IP_RANGE_2]
IPRange=10.0.2.0:254
AuditServers=server3,server1,server2
DistributionMethod=First Available
Comment=California office ip's
[Default]
IPRange=Default
AuditServers=server1,server2
DistributionMethod=Round Robin
Comment=Catch anything not explicitly specified
[Options]
Port = 9009
Password = AES: cb789817f8d99c7e5a1e5beb8510bf71
LogEnable=True
LogFile=c:\temp\dhcpdetect.log
DropPXE=1
[ActiveDirectory]
IncludeAllDomainControllers=1
Exclude=server1, server2
Include=server3
Network
Slow Links
Enable slow link detection tests the connection to a computer to see if it is through a 56 KB
modem or a similarly slow device. If the server software detects a slow link, it skips auditing with
any policies set only for fast links.