Table of Contents
Advertisement
Protection policies
This chapter includes the following topics:
■
■
■
■
■
■
■
■
About protection policies
Symantec Network Security provides a new functionality called protection
policies, that utilize multiple components such as signature and protocol
anomaly detection to take action directly at the point of entry into the network.
Protection policies enable users to tailor the protection based on security
policies and business need. Policies can be tuned by threat category, severity,
intent, reliability, and profile of protected resources. Common or individualized
policies can be applied per sensor, for both in-line and passive monitoring.
The Symantec Network Security software and the Symantec Network Security
7100 Series appliance employ a common core architecture that provides
detection, analysis, storage, and response functionality. Most procedures in this
section apply to both the 7100 Series appliance and the Symantec Network
Security 4.0 software. The 7100 Series appliance also provides additional
functionality that is unique to an appliance. Each section describes this
additional functionality in detail.
About protection policies
Using protection policies
Adjusting the view of event types
Enabling or disabling logging rules
Defining new protection policies
Updating policies automatically
Annotating policies and events
Backing up protection policies
Chapter
5
Advertisement
Table of Contents
