Is there a way for the system to automatically act on alert messages?

For example you get an alert for "Suspicious Activity: Client created many RDP sessions". Is there a way that when this alert is triggered untangle can block that specific access from that IP address?