Moves the selected rule up or down in the list. Incoming events are compared to rules in order by rank.

Allows you to type a different rank number for a selected rules and immediately move the rule to that position. In an environment with a large number of rules this process is faster than using the up and down buttons.

Table columns

Rule's rank in the list of rules. Rank controls the order in which incoming events are compared to Security Rules.

User defined name for the security rule.

Indicates whether the rule has been enabled.

The set of events that will activate the rule if the rule is enabled.

The host profile to which the security rule applies.

The = sign indicates the host must match the user host profile. The ≠ indicates the host must not match the user host profile.

An alarm is triggered when the security rule is satisfied.

The action that will be associated or automatically taken when the security rule is activated.

If enabled in the security rule, the administrator group that will receive an email when the rule creates an alarm.

If enabled in the security rule, the administrator group that will receive an email when an action is taken on the created alarm.

User name of the last user to modify the security rule.

Date and time of the last modification to this security rule.

Right click options

Deletes the selected security rule.

Opens the Modify Security Rule window for the selected security rule.

Opens the admin auditing log showing all changes made to the selected item.

For information about the admin auditing log, see Audit Logs.

You must have permission to view the admin auditing log. See Add an administrator profile.

Buttons