Defining New Protection Policies - Symantec 10521146 - Network Security 7120 Administration Manual

120 Protection policies

Defining new protection policies

Defining new protection policies
The Network Security console provides a way to define new policies, and clone
and modify existing policies. For software and appliance nodes, you can add
logging rules that specify which event types trigger events displayed in the
Incidents tab. For 7100 Series appliance nodes, you can add blocking rules that
specify which event types to prevent from entering the system.
1. Click New or Clone to
begin defining your new pro-
tection policy.
2. Enter a Name for the new
protection policy.
Optional: Apply search
parameters to display a sub-
set of event types.
3. Click Log/Block to set log-
ging and blocking rules in
the new policy.
4. Set Logging rules to alert
you when specified event
types are detected. The
alerts will be displayed in the
Incidents tab.
Optional: Click here to be
alerted periodically about
non-logged event types.
5. Set Blocking rules to pre-
vent specified event types
from entering the network.
This section describes the following procedures:
Adding or editing user-defined protection policies
■