Symantec 10268947 User Guide - Page 75

Viewing response rules, Interpreting color coding

Get Symantec 10268947 - Network Security 7160 PDF manuals and user guides
UPC - 037648243766
View all Symantec 10268947 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 75 highlights

Response Rules 75 About automated responses Note: Both StandardUsers and RestrictedUsers can view response rules, but cannot configure, edit, or delete them. Viewing response rules All users can view the response rules in the Network Security console. To view Response Rules 1 In the Network Security console, click Configuration > Response Rules. 2 In Response Rules, select a response rule. The background of the selected response rule turns purple. 3 Click a column to view the following response parameters: ■ Event Target ■ Event Type ■ Severity ■ Confidence ■ Event Source ■ Response Action ■ Next Action 4 Click the Response Actions column of a response rule to see all possible response actions. Interpreting color coding At a glance, you can tell which response rules have been saved, and which remain to be saved, by the background colors: Color White Yellow Purple Indication Indicates the response rule has been saved Indicates the response rule has not been saved Indicates the response rule is currently selected Select an entire row by clicking the number cell. Note: Make sure to click OK to save yellow response rules before proceeding.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
75
Response Rules
About automated responses
Note:
Both StandardUsers and RestrictedUsers can view response rules, but
cannot configure, edit, or delete them.
Viewing response rules
All users can view the response rules in the Network Security console.
To view Response Rules
1
In the Network Security console, click
Configuration
>
Response Rules
.
2
In
Response Rules
, select a response rule. The background of the selected
response rule turns purple.
3
Click a column to view the following response parameters:
■
Event Target
■
Event Type
■
Severity
■
Confidence
■
Event Source
■
Response Action
■
Next Action
4
Click the
Response Actions
column of a response rule to see all possible
response actions.
Interpreting color coding
At a glance, you can tell which response rules have been saved, and which
remain to be saved, by the background colors:
Select an entire row by clicking the number cell.
Note:
Make sure to click
OK
to save yellow response rules before proceeding.
Color
Indication
White
Indicates the response rule has been saved
Yellow
Indicates the response rule has not been saved
Purple
Indicates the response rule is currently selected