Fortinet black logo

Administration Guide

Add or modify an action

Copy Link
Copy Doc ID 1ce38eeb-8119-11eb-9995-00505692583a:939407
Download PDF

Add or modify an action

  1. Go to Logs > Security Incidents > Actions
  2. Click Add or select an existing security action and click Modify.
  3. Click in the Name field and enter a name for this security action.
  4. Use the table below to enter the security action information.
  5. Click OK to save your security rule action.
Settings

Field

Definition

Name

A name for this security action.

On Activity Failure

User indicates whether the system will continue to perform activities for the action if a higher- ranked activity fails. When Continue Running Activities is selected, the next ranked activity in the list is performed after a higher-ranked activity fails. When Stop Running Activities is selected, no lower-ranked activities are executed when a higher-ranked activity fails.

Perform Secondary Tasks After check box

When selected, if a secondary task is enabled for an activity, the secondary task is automatically executed to undo the action. The user may enter the amount of time that will pass between the primary and secondary tasks.

If the check box is not selected, the user may manually undo the action in the Security Alarms view.

Not currently in use/In use by

Indicates whether the action is in use, and the number of rules currently associated with the action.

Activities

Rank Buttons

Moves the selected action up or down in the list. Activities are performed in order by rank.

Rank

The activity's rank in the list of activities. Rank controls the order in which activities are performed.

Activity

Specifies the activity that will be performed.

Add

Click to add an activity.

Modify

Click to modify a selected activity.

Delete

Click to delete a selected activity.

Add or modify an action

  1. Go to Logs > Security Incidents > Actions
  2. Click Add or select an existing security action and click Modify.
  3. Click in the Name field and enter a name for this security action.
  4. Use the table below to enter the security action information.
  5. Click OK to save your security rule action.
Settings

Field

Definition

Name

A name for this security action.

On Activity Failure

User indicates whether the system will continue to perform activities for the action if a higher- ranked activity fails. When Continue Running Activities is selected, the next ranked activity in the list is performed after a higher-ranked activity fails. When Stop Running Activities is selected, no lower-ranked activities are executed when a higher-ranked activity fails.

Perform Secondary Tasks After check box

When selected, if a secondary task is enabled for an activity, the secondary task is automatically executed to undo the action. The user may enter the amount of time that will pass between the primary and secondary tasks.

If the check box is not selected, the user may manually undo the action in the Security Alarms view.

Not currently in use/In use by

Indicates whether the action is in use, and the number of rules currently associated with the action.

Activities

Rank Buttons

Moves the selected action up or down in the list. Activities are performed in order by rank.

Rank

The activity's rank in the list of activities. Rank controls the order in which activities are performed.

Activity

Specifies the activity that will be performed.

Add

Click to add an activity.

Modify

Click to modify a selected activity.

Delete

Click to delete a selected activity.