101
Populating the topology database
Adding nodes and objects
Be sure to delete the template (0.0.0.0/0) from the list.
Caution:
You must replace the default entry (0.0.0.0/0) in the Networks tab
with valid monitored networks in CIDR format before starting a sensor on
the interface. If you fail to take this step, the database can fill with invalid
data and result in a loss of detection and alerting functionality.
7
Click
OK
to add the in-line pair object to the topology.
Note:
Click
Topology
>
Save Changes
before quitting the Network Security
console. You will lose any unsaved changes when you exit.
See
“Deleting objects”
on page 81.
About router objects
Routers store data packets and forward them along the most expedient route
between hosts or networks. Symantec Network Security monitors this
connection. Add an object to the topology tree to represent each router that you
want Symantec Network Security to monitor.
If you plan to enable the TrackBack response action to read flow data exported
from routers, you must add router objects and corresponding interface objects
to the topology tree.
Summary of Contents for 10521146 - Network Security 7120
Page 1: ...Symantec Network Security Administration Guide...
Page 12: ...12 Contents Index...
Page 14: ...14...
Page 70: ...70...
Page 110: ...110 Populating the topology database Adding nodes and objects...
Page 158: ...158 Responding Managing flow alert rules...
Page 188: ...188...
Page 242: ...242 Reporting Playing recorded traffic...
Page 268: ...268 Managing log files Exporting data...
Page 316: ...316 Advanced configuration Configuring advanced parameters...
Page 318: ...318...
Page 338: ...338 SQL reference Using MySQL tables...
Page 366: ...366 Glossary...
Page 392: ...392 Index...