Enabling Or Disabling Logging Rules - Symantec 10521146 - Network Security 7120 Administration Manual

122 Protection policies
Defining new protection policies

Enabling or disabling logging rules

To clone a protection policy
1 In the Policies tab, select a protection policy.
2 Click Clone.
3 In Clone Policy, enter a name for the new protection policy, and click OK.
4 Modify the cloned protection policy.
See "Adding or editing user-defined protection policies"
The Network Security console provides the tools to determine how Symantec
Network Security monitors the network. Do this by setting logging rules that
specify which event types deserve alerting, and which can be ignored. This
section describes how to enable or disable event logging rules. Symantec
Network Security displays an event in the Incidents tab each time it detects an
event type specified by a logging rule.
You can also keep tabs on event types that you do not want logged every time
they are detected. You can apply the For Every Non-Logged Events Log One
Event option to notify you periodically, to prevent being inundated.
Set Logging rules to alert
you when specified event
types are detected. The
alerts will be displayed in the
Incidents tab.
Optional: Click here to be
alerted periodically about
non-logged event types.
Set Blocking rules to prevent
specified event types from
entering the network.
To enable logging rules to monitor events
1
In the Policies tab, do one of the following:
Click New > Full Event List.
■
on page 121.