Annotating Policies And Events - Symantec 10521146 - Network Security 7120 Administration Manual

126 Protection policies

Annotating policies and events

Annotating policies and events
Click Protection Policies > Clone > Edit > Auto Update Rules.
■
2 In Add Auto Update Rule, do any or all of the following:
In Category, choose a category from the pull-down list.
■
In Protocol, choose a protocol from the pull-down list.
■
In Severity, choose a severity from the pull-down list.
■
In Confidence, choose a confidence from the pull-down list.
■
In Apply Blocking, choose whether to enable blocking by clicking the
■
checkbox. The Add Auto Update Rule dialog sorts the rule table, and
first displays rules with blocking enabled, followed by rules without.
3 Click OK.
Note: You can configure policies to include active blocking rules and LiveUpdate
rules, so that when LiveUpdate adds new signatures, the blocking rules will be
created automatically. To do this, you must define at least one blocking rule in
the policy so that blocking is enabled. See also
rules" on page 123.
Note: EngineUpdates trigger the sensors to restart automatically when you
apply them.
See also "Updating Symantec Network Security"
The Network Security console provides a way to take notes on events at the
following three levels:
Annotating an entire policy
■
Annotating an event type in a policy
■
Annotating an instance of an event
■
Annotating an entire policy
The Network Security console provides a way to make a note about an entire
policy via the Network Security console. Then when you hover the cursor over
that policy in the policy list, your note appears as a tool tip.
To make a note about a policy
1 In the Policies tab, do one of the following:
"Enabling or disabling blocking
on page 269.