8
Contents
Setting a custom response action
...........................................................
147
Setting a TCP reset response action
.......................................................
150
Setting traffic record response action
....................................................
150
Setting a console response action
...........................................................
152
Setting export flow response action
.......................................................
153
Managing flow alert rules
................................................................................
154
Viewing flow alert rules
............................................................................
155
Adding flow alert rules
.............................................................................
155
Editing flow alert rules
.............................................................................
156
Deleting flow alert rules
...........................................................................
156
Chapter
7
Detecting
About detection
..................................................................................................
159
Configuring sensor detection
..........................................................................
160
Configuring sensor parameters
...............................................................
161
Restarting or stopping sensors
................................................................
161
Basic sensor parameters
...........................................................................
162
Data collection parameters
......................................................................
163
Threshold parameters
...............................................................................
164
Saturation parameters
..............................................................................
165
Miscellaneous parameters
........................................................................
167
Checksum validation parameters
............................................................
168
Advanced sensor parameters
...................................................................
169
Interval and flow parameters
..................................................................
170
Miscellaneous parameters
........................................................................
172
Table element parameters
........................................................................
173
Segment parameters
.................................................................................
175
Configuring port mapping
...............................................................................
177
Configuring signature detection
.....................................................................
179
About Symantec signatures
.....................................................................
179
About user-defined signatures
................................................................
180
Managing signatures
.................................................................................
180
Managing signature variables
.................................................................
184
Section
3
Using Symantec Network Security
Chapter
8
Monitoring
About incident and event data
.........................................................................
189
Viewing incident and event data
.............................................................
190
Adjusting the view
.....................................................................................
191
Examining incident and event data
................................................................
192
Examining incident data
...........................................................................
193