Symantec 10268947 - Network Security 7160, Руководство пользователя, Страница: 72 / 134

72 Protection Policies
Adjusting the view of event types
To view notes about an event types in a policy
1 In the Policies tab, click View .
2 In View Protection Policy , do one of the following:
■
In Search Events , double-click an event.
■
In Full Event List , double-click an event.
3 In Note for Selected Event Type(s) in the lower pane, view the annotation
about the selected event type.
4 Click Cancel to close the view.
Note: Both StandardUsers and RestrictedUsers can view notes to event types,
but cannot add, edit, or delete them.
Annotating event instances
The Network Security console provides a field in which to make notes about a
specific instance of an event. This provides assistance to system analysts in
resolving security incidents.
To view note about an instance of an event
1
In the Incidents tab, do one of the following:
■
Double-click an incident.
■
In the upper pane, click an incident, and then in the lower pane,
double-click the related event.
2 In Incident Details or Event Details , click Analyst Note .
3
Enter your annotation, and click Add Note .
4 Click Close .
Note: Both StandardUsers and RestrictedUsers can add notes to instances of an
event.