Adding New Response Rules - Symantec 10521146 - Network Security 7120 Administration Manual

Adding new response rules

Interpreting color coding
At a glance, you can tell which response rules have been saved, and which
remain to be saved, by the background colors:
Color Indication
White Indicates the response rule has been saved
Yellow Indicates the response rule has not been saved
Purple Indicates the response rule is currently selected
Select an entire row by clicking the number cell.
Note: Make sure to click OK to save yellow response rules before proceeding.
The Network Security console provides a way to add new response rules at any
time.
To add or insert a response rule
1 In the Network Security console, click Configuration > Response Rules.
2 In Response Rules, do one of the following:
Click Action > Add Response Rule to add a new row to the end of the
■
response policy table.
Click Action > Insert Response Rule to insert a new row into the
■
response policy table.
Click Action > Duplicate Response Rule to add a copy of an existing
■
row to the response policy table.
3
Configure each of the following parameters:
Setting event targets
■
Setting event types
■
Setting severity levels
■
Setting confidence levels
■
Setting event sources
■
Setting response actions
■
Setting next actions
■
Responding
Managing response rules
133