Copying A Rule; Deleting A Rule - Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 Administration Manual

208 C R
ONFIGURING ULES
Table 9-15 Offense Property Tests (continued)
Test Description
Target Count in Valid when the number of
an Offense targets for an offense greater
than, less than, or equal to
the configured value.
Event Count in Valid when the number of
an Offense events for an offense is
greater than, less than, or
equal to the configured
value.
Offense ID Valid when the Offense ID is
the configured value.

Copying a Rule

Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7

Deleting a Rule

Step 1
Step 2
Step 3
Step 4
Step 5
Default Test Name
when the number of
targets under attack is
greater than this
number
when the number of
events making up the
offense is greater than
this number
when the offense ID is
this ID
To copy a rule:
Select the Offense Manager tab.
The Offense Manager appears.
In the navigation bar, click Rules.
In the Display drop-down list box, select Rules.
Select the rule you wish to duplicate.
From the Actions drop-down list box, select Duplicate.
In the Enter name for the copied rule, enter a name for the new rule. Click Ok.
The duplicated rule appears.
Click Edit to edit the tests for the rule.
For more information on editing the rule, see
To delete a rule:
Select the Offense Manager tab.
The Offense Manager appears.
In the navigation bar, click Rules.
In the Display drop-down list box, select Rules.
Select the rule you wish to delete.
From the Actions drop-down list box, select Delete.
STRM Administration Guide
Parameters
Configure the following parameters:
greater than - Specify if you wish
•
the number of targets to be
greater than, less than, or equal
to the configured value.
this number - Specify the value
•
you wish this test to consider.
Configure the following parameters:
greater than - Specify if you wish
•
the number of events to be
greater than, less than, or equal
to the configured value.
this number - Specify the value
•
you wish this test to consider.
this ID - Specify the offense ID you
wish this test to consider.
Creating a Rule.