Symantec 10268947 - Network Security 7160, User Manual

Page: 87 / 134

87 Detection Methods
About port mapping
Viewing sensor parameters
The Network Security console provides a way to view descriptions of sensor
parameters. The upper right pane of the Sensor Parameters dialog displays a
description of the parameter. The lower right pane displays the current value.
To view the sensor parameters
1
On the Devices tab, right-click the sensor.
2 Click Configure Sensor Parameters .
3 In Sensor Parameters , scroll through the list and select a parameter to view.
4 Click OK to close.
About port mapping
Symantec Network Security provides a way to tune the sensors to look for
particular types of anomalies and signatures on a port by reconfiguring the
default port mapping, or adding new mappings. For example, mappings can be
added to run services on non-standard ports or to ignore ports on which you
normally run non-standard protocols, to mitigate common violations of protocol
from being falsely reported as events.
Viewing port mappings
The types of anomalies and signatures that the Symantec Network Security
sensors look for on a port can be viewed in the Network Security console. With
any user account, you can view the port mappings for any supported protocol.
To view port mappings
1 In the Network Security console, click Configuration >
Node
> Port
Mappings .
2 In Local Node Selection , select the node for which you want to view the
mappings.
About signature detection
Symantec Network Security provides the functionality to begin detection
immediately by applying protection policies. In addition to this initial ability,
detection can also be enhanced and tuned to a particular network environment
by creating and applying user-defined signatures.