Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 328 / 861

327 Preventing attacks
Blocking suspicious or malicious traffic with IDS
You can view additional intrusion event details in the IDS Event Type Properties dialog box. This
includes the information viewable from the table, as well as a description of the vulnerability that the
signature is designed to protect against. The properties dialog box also includes information on the
recommended response if an attack is detected, the affected product or component, and additional
Web references for more information.
Prerequisites
None.
To view intrusion events in a tabular format
1
In the SGMI, in the left pane, under Policy, click IDS/IPS .
2 In the right pane, on the Configuration tab, next to View, click Table .
3 In the Policy name drop-down list, select an IDS/IPS policy.
4 Select the intrusion event you want to view, and then click Properties .
5 To close the IDS Event Type Properties dialog box, click OK .
To modify columns for additional details
1 Click View > Show Columns .
2 Do one of the following:
■
Click the columns you want to add, and then click Close .
■
To show the default columns, click Restore Defaults .
To sort details
◆
Click the column header for the category you want to sort alphabetically.
An arrow pointing up indicates that the category is sorted in ascending order.
An arrow pointing down indicates that the category is sorted in descending order.
Related Information
For further information related to this topic, see the following:
■
“IDS Event Type Properties dialog box—General tab” on page 643