Symantec 10521146 - Network Security 7120, Руководство администратора

Страница: 133 / 392

133 Responding
Managing response rules
Interpreting color coding
At a glance, you can tell which response rules have been saved, and which
remain to be saved, by the background colors:
Select an entire row by clicking the number cell.
Note: Make sure to click OK to save yellow response rules before proceeding.
Adding new response rules
The Network Security console provides a way to add new response rules at any
time.
To add or insert a response rule
1 In the Network Security console, click Configuration > Response Rules .
2 In Response Rules , do one of the following:
■
Click Action > Add Response Rule to add a new row to the end of the
response policy table.
■
Click Action > Insert Response Rule to insert a new row into the
response policy table.
■
Click Action > Duplicate Response Rule to add a copy of an existing
row to the response policy table.
3 Configure each of the following parameters:
■
Setting event targets
■
Setting event types
■
Setting severity levels
■
Setting confidence levels
■
Setting event sources
■
Setting response actions
■
Setting next actions
Color Indication
White Indicates the response rule has been saved
Yellow Indicates the response rule has not been saved
Purple Indicates the response rule is currently selected