Symantec 10521146 Administration Guide - Page 120

120 Protection policies Defining new protection policies Defining new protection policies The Network Security console provides a way to define new policies, and clone and modify existing policies. For software and appliance nodes, you can add logging rules that specify which event types trigger events displayed in the Incidents tab. For 7100 Series appliance nodes, you can add blocking rules that specify which event types to prevent from entering the system. 1. Click New or Clone to begin defining your new protection policy. 2. Enter a Name for the new protection policy. Optional: Apply search parameters to display a subset of event types. 3. Click Log/Block to set logging and blocking rules in the new policy. 4. Set Logging rules to alert you when specified event types are detected. The alerts will be displayed in the Incidents tab. Optional: Click here to be alerted periodically about non-logged event types. 5. Set Blocking rules to prevent specified event types from entering the network. This section describes the following procedures: ■ Adding or editing user-defined protection policies