Symantec 10521146 Administration Guide - Page 127

Protection policies 127 Annotating policies and events ■ Click Add. ■ Select a policy and click Edit. 2 In the Policies tab, click the Notes tab. 3 Enter a note regarding this policy, and click OK. To view a note about a policy ◆ In the Policies tab, hover the cursor over the policy to display the note as a tool tip. Annotating an event type in a policy The Network Security console provides a way to make a note about an event type within a policy via the Network Security console. When the event is triggered, your note is displayed in the Event Details. For example, you might note that this event is false positive if it occurs within a certain IP range. The note is specific to that event type when it occurs in that policy. Event Details displays the note each time this policy detects the annotated event. To make a note about an event within a policy 1 In the Policies tab, do one of the following: ■ Click New. ■ Click Edit. 2 In Add Protection Policy or Edit Protection Policy, do one of the following: ■ In Search Events, double-click an event. ■ In Full Event List, double-click an event. 3 In Note for Selected Event Type(s) in the lower pane, enter an annotation. Event Details displays this annotation each time this policy detects the annotated event. See "Viewing event details" on page 197. 4 Click OK > OK > Apply. Annotating an instance of an event The Network Security console provides a way to make a note about a specific instance of an event via the Network Security console. This provides assistance to system analysts in resolving security incidents. To make a note about an instance of an event 1 In the Incidents tab, do one of the following: ■ Double-click an incident.