McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 222 / 328

Creating and editing Automatic Response rules
Use these tasks to create and edit Automatic Response rules. These tasks allow you to define when
and how a response can be taken on the event occurring either at the server or at a managed system.
Automatic Response rules do not have a dependency order.
Tasks
• Describing the rule on page 222
• Setting filters for the rule on page 223
Use this task to set the filters for the response rule on the Filters page of the Response
Builder wizard.
• Setting thresholds of the rule on page 223
Use this task to define when the event triggers the rule on the Aggregation page of the
Response Builder wizard.
• Configuring the action for Automatic Response rules on page 224
Use this task to configure the responses that are triggered by the rule on the Responses
page of the Response Builder wizard.
Describing the rule
Use this task to begin creating a rule. The Description page of the Response Builder wizard allows you
to:
• Name and describe the rule.
• Specify the language used by the response.
• Specify the event type and group that triggers this response.
• Enable or disable the rule.
For option definitions click
?
in the interface.
18 Responding to events in your network
Creating and editing Automatic Response rules
222 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide