Deploying the Simple Correlation Rule

  1. Click the Correlation tab and select Correlation Rule Manager in the navigation bar.

  2. Click Tutorial_SourcePort_DestinationPort > Deploy Rule.

  3. (Optional) In the Deploy Rule window, add an action. This allows you to:

    • Configure Correlated Event

    • Add to Dynamic List

    • Remove from Dynamic List

    • Execute a Command

    • Send Email

    • Create Incident

  4. Click Next. The rule indicates deployed by the color green.

For trademark and copyright information, see Legal Notices.