[1100007]
desc=Device based violation (for 1 trigger based)
priority=1
trigger=DEVICE::3
actions=log,autoreg
enabled=Y

[1100008]
desc=Detect based violation for (OR with 2 triggers same type)
template=nat
trigger=Detect::1,Detect::2
actions=trap,email,log
enabled=Y

[1100009]
desc=Lot of stuff based violation (for OR)
template=nat
trigger=accounting::TOT20GBM, detect::1, device::2,dhcp_fingerprint::3, dhcp_vendor::4,internal::5, mac::^12:34,mac_vendor::6,nessus::7,openvas::8,provisioner::check,useragent::0
actions=trap,email,log
enabled=Y

[1100010]
desc=Disabled
template=nat
trigger=detect::-1,detect::1
actions=trap,email,log
enabled=N

[1100011]
desc=Combined triggers
template=nat
trigger= (detect::10 & mac::21:34:56)
actions=trap,email,log
enabled=Y

[1100012]
desc=DHCPv6 testing
template=nat
trigger=dhcp6_fingerprint::1,dhcp6_enterprise::2
actions=trap,email.log
enabled=Y

[1100013]
desc=Device based violation (for 1 trigger based)
priority=1
trigger=DEVICE::13
actions=log
enabled=Y

