Symantec 10521146 - Network Security 7120 Manuals

Manuals and User Guides for Symantec 10521146 - Network Security 7120. We have 2 Symantec 10521146 - Network Security 7120 manuals available for free PDF download: Administration Manual, User Manual

Symantec 10521146 - Network Security 7120 Administration Manual (392 pages)

Administration Guide

Brand: Symantec | Category: Firewall | Size: 3.12 MB

Table of Contents
5
Chapter 1 Introduction

15
- About the Symantec Network Security Foundation
  15
  - About the Symantec Network Security 7100 Series
    15
  - About Other Symantec Network Security Features
    17
- Finding Information
  20
Chapter 2 Architecture

25
- About Symantec Network Security
  25
- About the Core Architecture
  25
  - About Detection
    26
  - About Analysis
    30
  - About Response
    31
- About Management and Detection Architecture
  32
Chapter 3 Getting Started

41
Chapter 4 Populating the Topology Database

71
- About the Network Topology
  71
  - About the Devices Tab
    72
  - About Topology Mapping
    74
- Managing the Topology Tree
  78
  - Viewing Auto-Generated Objects
    79
  - Viewing Node Details
    79
  - Viewing Node Status
    79
  - Adding Objects for the First Time
    80
  - Editing Objects
    81
  - Deleting Objects
    81
  - Reverting Changes
    82
  - Saving Changes
    82
  - Forcing Nodes to Synchronize
    83
  - Backing up
    83
- Adding Nodes and Objects
  83
  - About Location Objects
    83
  - About Nodes and Interfaces
    85
  - About Network Security Software Nodes
    86
  - About 7100 Series Appliance Nodes
    92
  - About Router Objects
    101
  - About Smart Agents
    104
  - About Managed Network Segments
    108
Chapter 5 Protection Policies

111
- About Protection Policies
  111
  - Responding to Malicious or Suspicious Events
    112
- Understanding the Protection Policy Work Area
  112
- Using Protection Policies
  113
  - Selecting Pre-Defined Policies
    114
  - Setting Policies to Interfaces
    115
  - Applying to Save Changes
    115
  - Overriding Blocking Rules Globally
    115
  - Undoing Policy Settings
    116
- Adjusting the View of Event Types
  117
- Defining New Protection Policies
  120
- Updating Policies Automatically
  125
- Annotating Policies and Events
  126
- Backing up Protection Policies
  128
Chapter 6 Responding

129
- About Response Rules
  129
- About Automated Responses
  131
- Managing Response Rules
  132
  - Viewing Response Rules
    132
  - Adding New Response Rules
    133
  - Editing Response Rules
    134
  - Searching Event Types
    134
  - Deleting Response Rules
    135
  - Saving or Reverting Changes
    135
  - Backing up Response Rules
    135
- Setting Response Parameters
  136
  - Setting Event Targets
    136
  - Setting Event Types
    136
  - Setting Severity Levels
    137
  - Setting Confidence Levels
    139
  - Setting Event Sources
    139
  - Setting Response Actions
    140
  - Setting Next Actions
    140
- Setting Response Actions
  141
  - Setting no Response Action
    142
  - Setting Email Notification
    142
  - Setting SNMP Notification
    145
  - Setting Trackback Response Action
    147
  - Setting a Custom Response Action
    147
  - Setting a TCP Reset Response Action
    150
  - Setting Traffic Record Response Action
    150
  - Setting a Console Response Action
    152
  - Setting Export Flow Response Action
    153
- Managing Flow Alert Rules
  154
  - Viewing Flow Alert Rules
    155
  - Adding Flow Alert Rules
    155
  - Editing Flow Alert Rules
    156
  - Deleting Flow Alert Rules
    156
Chapter 7 Detecting

159
- About Detection
  159
- Configuring Sensor Detection
  160
  - Configuring Sensor Parameters
    161
  - Restarting or Stopping Sensors
    161
  - Basic Sensor Parameters
    162
  - Data Collection Parameters
    163
  - Threshold Parameters
    164
  - Saturation Parameters
    165
  - Miscellaneous Parameters
    167
  - Checksum Validation Parameters
    168
  - Advanced Sensor Parameters
    169
  - Interval and Flow Parameters
    170
  - Miscellaneous Parameters
    172
  - Table Element Parameters
    173
  - Segment Parameters
    175
- Configuring Port Mapping
  177
- Configuring Signature Detection
  179
  - About Symantec Signatures
    179
  - About User-Defined Signatures
    180
  - Managing Signatures
    180
  - Managing Signature Variables
    184
- Using Symantec Network Security
  187
Chapter 8 Monitoring

189
- About Incident and Event Data
  189
  - Viewing Incident and Event Data
    190
  - Adjusting the View
    191
- Examining Incident and Event Data
  192
  - Examining Incident Data
    193
  - Examining Event Data
    196
- Managing Incident and Event Data
  201
  - Selecting Columns
    202
  - Selecting View Filters
    205
  - Marking and Annotating
    207
  - Saving, Copying, and Printing Data
    209
  - Emailing Incident or Event Data
    211
- Tuning Incident Parameters
  213
- Monitoring Flow Statistics
  219
  - Enabling Flow Data Collection
    219
  - Configuring Flowchaser
    220
Chapter 9 Reporting

223
- About Reports and Queries
  223
- Scheduling Reports
  224
  - Adding or Editing Report Schedules
    224
  - Refreshing the List of Reports
    225
  - Deleting Report Schedules
    226
  - Managing Scheduled Reports
    226
- Reporting Top-Level and Drill-Down
  228
  - About Report Formats
    228
  - About Report Types
    229
  - About Incident/Event Reports
    229
  - Printing and Saving Reports
    230
- About Top-Level Report Types
  230
  - Reports of Top Events
    231
  - Reports Per Incident Schedule
    232
  - Reports Per Event Schedule
    233
  - Reports by Event Characteristics
    233
  - Reports Per Network Security Device
    235
  - Drill-Down-Only Reports
    236
- Querying Flows
  237
  - Viewing Current Flows
    238
  - Viewing Flow Statistics
    239
  - Viewing Exported Flows
    239
- Playing Recorded Traffic
  240
  - Replaying Recorded Traffic Flow Data
    241
Chapter 10 Managing Log Files

243
- About the Log Files
  243
  - About the Install Log
    243
  - About the Operational Log
    244
- Managing Logs
  244
  - Viewing Log Files
    244
  - Viewing Live Log Files
    245
  - Archiving Log Files
    246
  - Copying Log Files
    246
  - Deleting Log Files
    247
  - Refreshing the List of Log Files
    247
- Configuring Automatic Archiving
  248
  - Setting Automatic Logging Levels
    248
  - Archiving Log Files
    249
  - Compressing Log Files
    252
- Exporting Data
  254
  - Exporting to File
    254
  - Exporting to SESA
    255
  - Exporting to SQL
    257
  - Exporting to Syslog
    260
  - Transferring Via SCP
    264
Chapter 11 Advanced Configuration

269
- About Advanced Setup
  269
- Updating Symantec Network Security
  269
  - About Liveupdate
    270
  - Scanning for Available Updates
    271
  - Applying Updates
    271
  - Setting the Liveupdate Server
    272
- Scheduling Live Updates
  273
- Managing Node Clusters
  275
  - Creating a New Cluster
    275
  - Managing an Established Cluster
    278
  - Setting a Cluster-Wide Parameter
    281
  - Backup up Cluster-Wide Data
    282
- Integrating Third-Party Events
  282
  - Integrating Via Smart Agents
    283
  - Integrating with Symantec Decoy Server
    285
- Establishing High Availability Failover
  287
- Backing up and Restoring
  297
  - Backing up and Restoring on the Network Security Console
    298
  - Backing up and Restoring on Compact Flash
    302
- Configuring Advanced Parameters
  308
- Appendices
  317
Appendix A User Groups Reference

319
- About User Groups
  319
  - About Group Permissions
    319
  - Permissions by Group
    320
  - Permissions by Task
    321
Appendix B SQL Reference

325
- About SQL Export Parameters
  325
  - Setting up SQL Export
    325
- Using Oracle Tables
  326
  - Oracle Incident Table
    326
  - Oracle Event Table
    328
- Using Mysql Tables
  332
  - Mysql Incident Table
    332
  - Mysql Event Table
    334
- Glossary
  339

Symantec 10521146 - Network Security 7120 User Manual (30 pages)

In-line Bypass Unit

Brand: Symantec | Category: Firewall | Size: 0.42 MB

Symantec Categories

Software Network Hardware Gateway

Storage Firewall

More Symantec Manuals

Symantec 10521146 - Network Security 7120 Manuals

Symantec 10521146 - Network Security 7120 Administration Manual (392 pages)

Table of Contents

Chapter 1 Introduction

Chapter 2 Architecture

Chapter 3 Getting Started

Chapter 4 Populating the Topology Database

Chapter 5 Protection Policies

Chapter 6 Responding

Chapter 7 Detecting

Chapter 8 Monitoring

Chapter 9 Reporting

Chapter 10 Managing Log Files

Chapter 11 Advanced Configuration

Appendix A User Groups Reference

Appendix B SQL Reference

Symantec 10521146 - Network Security 7120 User Manual (30 pages)

Table of Contents

Related Products

Symantec Categories