Technical Documentation

Example: Using Profiler to Alert You to New Hosts and Port Activity

After you have created a baseline and installed an appropriate security policy, you can use Profiler to alert you when new hosts or applications appear in your network. You can analyze the alerts to decide whether to update your security policy.

To set alerts when Profiler detects new hosts or applications:

  1. In the NSM Device Manager, right-click the IDP appliance and select IDP Profiler > Start Profiler.
  2. Retain your baseline settings for general features, tracked hosts, and contexts.
  3. Click the Alert tab and select options to generate alerts when Profiler detects new hosts, new protocols, or new ports.
  4. Click Apply.

Published: 2010-01-12