75
Response Rules
About automated responses
Note:
Both StandardUsers and RestrictedUsers can view response rules, but
cannot configure, edit, or delete them.
Viewing response rules
All users can view the response rules in the Network Security console.
To view Response Rules
1
In the Network Security console, click
Configuration
>
Response Rules
.
2
In
Response Rules
, select a response rule. The background of the selected
response rule turns purple.
3
Click a column to view the following response parameters:
■
Event Target
■
Event Type
■
Severity
■
Confidence
■
Event Source
■
Response Action
■
Next Action
4
Click the
Response Actions
column of a response rule to see all possible
response actions.
Interpreting color coding
At a glance, you can tell which response rules have been saved, and which
remain to be saved, by the background colors:
Select an entire row by clicking the number cell.
Note:
Make sure to click
OK
to save yellow response rules before proceeding.
Color
Indication
White
Indicates the response rule has been saved
Yellow
Indicates the response rule has not been saved
Purple
Indicates the response rule is currently selected
Summary of Contents for 10268947 - Network Security 7160
Page 1: ...Symantec Network Security User Guide...
Page 18: ...18 Introduction Finding information...
Page 34: ...34 Architecture About management and detection architecture...
Page 46: ...46 Getting Started About deploying node clusters...
Page 64: ...64 Topology Database Viewing objects in the topology tree...
Page 124: ...124 Log Files About log files...
Page 134: ...134 Index...
