Symantec 10521146 Administration Guide - Page 121
Adding or editing user-defined protection policies, Cloning existing protection policies, Policies
UPC - 037648268134
View all Symantec 10521146 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 121 highlights
Protection policies 121 Defining new protection policies ■ Cloning existing protection policies ■ Enabling or disabling logging rules ■ Enabling or disabling blocking rules ■ Overriding blocking rules globally ■ Deleting user-defined protection policies Adding or editing user-defined protection policies The Network Security console provides a way to add and edit user-defined protection policies. Symantec protection policies cannot be modified. If you want to modify a Symantec protection policy, clone it and modify the clone. To add or edit user-defined protection policies 1 In the Policies tab, do one of the following: ■ Click New. ■ Select an existing protection policy, and click Clone > Edit. 2 In Policy Name, enter a unique name to distinguish this policy. 3 You have the option of doing any or all of the following: ■ In Search Events, you can change the search parameters to display a more manageable subset of event types to apply rules. See "Searching to create a subset of event types" on page 117. ■ In Search Results, you can adjust the view. See "Adjusting the view by columns" on page 119. 4 In Search Results, define the policy by doing any or all of the following: ■ For software and appliance nodes, select event types to apply logging rules to direct the monitoring of events. See "Enabling or disabling logging rules" on page 122. ■ For 7100 Series appliance nodes, select event types to apply blocking rules. Software nodes do not currently support blocking rules. See "Enabling or disabling blocking rules" on page 123. 5 In Search Events, click OK to exit. 6 In the Protection Policies tab, click Apply to save and apply changes. Cloning existing protection policies Because Symantec protection policies cannot be edited, if you want to modify a Symantec protection policy, you must clone it and modify the clone.