This guide was created as a reference for configuring Intrusion Alert–based events. The advantage of using an Intrusion Alert instead of other RSA events (such as Target Detected) is that the Intrusion Alert is driven entirely by MASS alarm logic. This means the RSA will receive an event only when the alarm zone is actually triggered.
By using this method, all filtering and detection logic is handled within MASS, while the RSA is responsible only for processing alarm logs, alarm pop-ups, and related notifications.
1. Create alarm zones in MASS.
2. Add Inter System Gateway Tracking System
3. Select events
3. Add ISG Tracking System
4. Create alarms
5. Create Actions to trigger Alarms with Alarm name filter
6. Import MASS alarm zones polygons to RSA MAP.
