Creating A Simple Correlation Rule; Deploying The Simple Correlation Rule - Novell SENTINEL RAPID DEPLOYMENT 6.1 - 12-2009 User Manual

13.4.1 Creating a Simple Correlation Rule

1 Click the Correlation tab and select Correlation Rule Manager in the navigation bar.
2 In the Correlation Rule Manager window, click Add.
3 Click Simple to create a simple rule.
4 Select All in the Fire if drop-down menu.
5 Specify the following
SourcePort = 10025
DestinationPort = 25
6 Click Next.
7 To have this rule fire as many times as possible, select Continue to perform actions every time
this fires.
8 Click Next.
9 In the General Description window, specify a name. A name and description that indicates that
this is tutorial rule that does not apply to the network.
10 Click Next.
11 Select not to create another rule, then click Next.

13.4.2 Deploying the Simple Correlation Rule

1 Click the Correlation tab and select Correlation Rule Manager in the navigation bar.
2 Click Tutorial_SourcePort_DestinationPort > Deploy Rule.
Quick Start 309