Symantec 10521146 - Network Security 7120 Administration Manual page 8

8 Contents
Chapter 7
Section 3
Chapter 8
Setting a custom response action ........................................................... 147
Setting a TCP reset response action ....................................................... 150
Setting traffic record response action .................................................... 150
Setting a console response action ........................................................... 152
Setting export flow response action ....................................................... 153
Managing flow alert rules ................................................................................ 154
Viewing flow alert rules ............................................................................ 155
Adding flow alert rules ............................................................................. 155
Editing flow alert rules ............................................................................. 156
Deleting flow alert rules ........................................................................... 156
Detecting
About detection .................................................................................................. 159
Configuring sensor detection .......................................................................... 160
Configuring sensor parameters ............................................................... 161
Restarting or stopping sensors ................................................................ 161
Basic sensor parameters ........................................................................... 162
Data collection parameters ...................................................................... 163
Threshold parameters ............................................................................... 164
Saturation parameters .............................................................................. 165
Miscellaneous parameters ........................................................................ 167
Checksum validation parameters ............................................................ 168
Advanced sensor parameters ................................................................... 169
Interval and flow parameters .................................................................. 170
Miscellaneous parameters ........................................................................ 172
Table element parameters ........................................................................ 173
Segment parameters ................................................................................. 175
Configuring port mapping ............................................................................... 177
Configuring signature detection ..................................................................... 179
About Symantec signatures ..................................................................... 179
About user-defined signatures ................................................................ 180
Managing signatures ................................................................................. 180
Managing signature variables ................................................................. 184
Using Symantec Network Security
Monitoring
About incident and event data ......................................................................... 189
Viewing incident and event data ............................................................. 190
Adjusting the view ..................................................................................... 191
Examining incident and event data ................................................................ 192
Examining incident data ........................................................................... 193