Adding a Custom Classification

Procedure

Step 1

While creating or editing a rule, choose Edit Classifications from the Classification drop-down list (Objects > Intrusion Rules > Create Rules > Edit Classifications).

If View Classifications displays instead, the configuration belongs to an ancestor domain, or you do not have permission to modify the configuration.

Step 2

Enter a Classification Name and Classification Description as described in Intrusion Event Details.

Step 3

Choose a priority for the classification from the Priority drop-down list.

Step 4

Click Add.

Step 5

Click Done.