Symantec 10268947 - Network Security 7160, User Manual

Page: 126 / 134

126 Index
selecting 100
communication
via QSP proxy 29
confidence
about level 78
likelihood of attack 78
mapping level 101
response rules 78
console response action
configuring 82
console. See Network Security console, serial
console, Symantec Decoy Server console, LCD
panel
copy ports. See monitoring interfaces
correlation
about 24
about cross-node analysis 25
custom response actions
creating rules 81
failure to execute 103
custom signatures. See user-defined signatures
D
data
events displayed 97, 100
incidents 96
tracking stream 80
databases
architecture 29
time delay while loading 36
deception
device objects 63
Decoy Server. See Symantec Decoy Server
denial of service.
See DoS
deployment
about 40
about clusters 40
about in-line mode 40
about passive mode 40
about single-node 40
monitoring groups 44
node clusters 43
single appliance node 42
single node 41
single software node 41
details
viewing event types 70
viewing objects 50
detection
about 85
about 7100 Series appliances 32
about architecture 20
about denial of service 23
about protocol anomaly detection 85
about refinement rules 86
about signature 86
about traffic rate monitoring 23
about user-defined signatures 22
by refinement rules 89
external EDP 23
port mapping 87
protocol anomaly 21
signature 87
Symantec signatures 22, 88
user-defined signatures 88
viewing port mappings 87
viewing signatures 89
Devices
viewing details 92
devices
event data display 97, 100
event notice display 102
documentation
7100 Series 14
software 15
DoS
about detection architecture 23
top Telnet event type 111
drill-down reports
destination sources 114
devices with flow statistics 115
drill-down-only reports 116
event destinations 116
event details 116
event lists 116
event sources 116
events per day 113
events per hour 113
events per month 113
flows by destination address 116
flows by destination port 117
flows by protocol 117
flows by source address 116
flows by source port 117
incident details 116
incidents list 112
incidents per day 112
incidents per hour 112