Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 581 / 861

580 Field descriptions
Monitors field descriptions
IDS/IPS Blacklist Notification Properties—Blacklist tab
The Blacklist tab lets you specify the security gateway to which blacklist information is sent.
Associated tasks
The task that you can perform with this tab is:
■
“Configuring IDS/IPS blacklist notifications” on page 486
IDS/IPS Blacklist Notification Properties—Severity tab
The Severity tab lets you select the severity levels that trigger the blacklist notification. These
severities correspond to log message severities.
Associated tasks
The task that you can perform with this tab is:
■
“Configuring IDS/IPS blacklist notifications” on page 486
Table D-17
IDS/IPS Blacklist Notification Properties—Blacklist tab
Field Description
Send IDS/IPS
blacklist
information to Indicates where blacklist information is sent.
Options are:
■
Local firewall
Blacklist information is sent to the managed security gateway.
This is the default.
■
Remote firewall
Blacklist information is sent to another security gateway that you specify.
Firewall IP address or fully qualified domain name of the selected remote security gateway.
Port Port number over which to send the blacklist information to the remote security gateway.
The default value is 426.
Password Type the administrator password for the remote security gateway.
Verify password Re-type the administrator password for the remote security gateway.
Table D-18
IDS/IPS Blacklist Notification Properties—Severity tab
Field Description
Emergency Indicates an emergency. The system will no longer allow traffic through. Security is ensured
by shutting down all network traffic through the security gateway.
Critical Indicates that the security gateway security is still working, but one or more services have
failed.
Alert Indicates that a security rule has been triggered, and could potentially be an attempt to
breach the network perimeter.
This is the default.
Error Issued when normal security gateway operation cannot complete successfully. The security
of your gateway is still ensured, but you should attempt to correct the error as soon as
possible.
Warning Indicates an error condition that the security gateway can recover from, but require
attention to prevent further occurrences.
Notice Indicates a situation requiring minor attention.