Creating a Simple Correlation Rule

  1. Click the Correlation tab and select Correlation Rule Manager in the navigation bar.

  2. In the Correlation Rule Manager window, click Add.

  3. Click Simple to create a simple rule.

  4. Select All in the Fire if drop-down menu.

  5. Specify the following

    • SourcePort = 10025

    • DestinationPort = 25

  6. Click Next.

  7. To have this rule fire as many times as possible, select Continue to perform actions every time this fires.

  8. Click Next.

  9. In the General Description window, specify a name. A name and description that indicates that this is tutorial rule that does not apply to the network.

  10. Click Next.

  11. Select not to create another rule, then click Next.

For trademark and copyright information, see Legal Notices.