Symantec 10521146 - Network Security 7120, Administration Manual

Page: 219 / 392

219 Monitoring
Monitoring flow statistics
2 In Select Node , choose the node from the pull-down list, and click OK .
3 In the left pane, click Event Correlation ‘Destination Port’ Weight .
4 In the lower right pane, enter a value between 0 and 10.
5
Click Apply .
6 In Apply Changes To , select the node to which to apply the parameter.
7 Click OK to save the changes to this node and close.
Monitoring flow statistics
This section describes the following topics:
■
Enabling flow data collection
■
Configuring FlowChaser
Enabling flow data collection
Symantec Network Security can receive flow data from its own sensors, routers,
and from third-party sensors. You can optimize this by enabling FlowChaser, a
flow data store that provides data source for Symantec Network Security to
analyze and correlate. FlowChaser receives information about network flows
from Network Security sensors, routers, and third-party devices. FlowChaser
stores the data in an optimized fashion that Symantec Network Security uses for
TrackBack and response actions.
To enable flow data collection
1 In the Network Security console, click the Devices tab.
2 In the topology tree, right-click a monitoring interface.
3 In the pop-up list, click Configure Sensor Parameters .
4 In the left pane of Sensor Configuration Parameters, click Enable Flow
Statistics Collection .
5 In the right pane, click True .
6 Click Apply .
7 In Apply Changes To , select a monitoring interface and click OK .