Symantec 10521146 Administration Guide - Page 155

Responding 155 Managing flow alert rules ■ Adding flow alert rules Viewing flow alert rules Symantec Network Security provides a way to view flow alert rules from the Network Security console. To view flow alert rules ◆ In the Network Security console, click Configuration > Flow Alert Rules. In Flow Alert Rule, you can view the rule details. Note: SuperUsers and Administrators can read and write flow alert rules; StandardUsers can view only; and RestrictedUsers have no access at all. See "User groups reference" on page 319 for more about permissions. Adding flow alert rules We recommend that you initially configure flow alert rules to allow acceptable corporate traffic flow. Set the Permit and Alert rules to specify explicitly what to permit across each interface, and to alert on everything else. To add a flow alert rule 1 In the Network Security console, click Configuration > Flow Alert Rules. 2 In Flow Alert Rules, click Add. 3 In Flow Alert Rule, in Rule Type, do one of the following: ■ Click Permit. ■ Click Alert. See "Using the permit rule type" on page 157. 4 Click Set Interfaces. 5 In Select Interface or Device, select the object where you want the rule applied, and click OK. 6 In Flow Alert Rule, select the following information from the pull-down lists, and click Add: ■ Source IP address, mask, and port ■ Destination IP address, mask, and port See "Providing an appropriate mask" on page 157. 7 In Flow Alert Rule, click OK.