Symantec 10521148 - Network Security 7161, Implementation Manual

Page: 12 / 214

4 Contents
Chapter 8 Configuring nodes and interfaces
About configuring nodes and interfaces ........................................................101
Configuring appliance nodes ...........................................................................102
About appliance node fields .....................................................................102
Node Options tab fields .....................................................................103
Advanced Network Options tab fields ............................................104
Adding or editing an appliance node ......................................................105
Configuring appliance interfaces ....................................................................106
Configuring monitoring interfaces .........................................................107
About monitoring interface fields ...................................................107
Editing a monitoring interface ........................................................108
Configuring an in-line pair .......................................................................109
About in-line pair fields ....................................................................109
Adding or editing an in-line pair .....................................................111
Configuring an interface group ...............................................................112
About interface group fields ............................................................112
Adding or editing an interface group .............................................113
Chapter 9 Configuring detection and response
About detection and response .........................................................................115
Starting a sensor on an appliance interface ..................................................115
About protection policies .........................................................................116
Creating and applying protection policies .....................................................116
Viewing a protection policy .....................................................................117
Setting policies to interfaces ...................................................................118
Unapplying or removing policies from interfaces ...............................118
Enabling/disabling blocking on in-line pairs ........................................119
Adding a new protection policy ...............................................................119
Cloning existing protection policies .......................................................119
Modifying custom protection policies ....................................................120
Using Search Events ..................................................................................120
Setting logging or blocking on events in a policy .................................121
Deleting custom protection policies .......................................................123
About response rules .........................................................................................124
Adding response rules ..............................................................................124
Deleting response rules ............................................................................126
Chapter 10 Monitoring and reporting events and status
About monitoring and reporting events and status .....................................127
Viewing events and incidents ..........................................................................128
Viewing incident data ...............................................................................128
Viewing incident details ...........................................................................128