Veritas NetBackup™ Appliance Administrator's Guide

To download NetBackup appliance IPS and IDS policies:

1. Log in to the NetBackup Appliance Web Console.
2. Click Monitor > SDCS Events.
3. Under Symantec Data Center Security Downloads, click NetBackup Appliance IPS and IDS Policies to download the IDS and IPS policies.

   The SDCSSPolicies.zip file is downloaded to your local folders.

4. Extract the contents from the SDCSSPolicies.zip file.

   The SDCSSPolicies folder contains the following:

   • NetBackup Appliance Detection Policy.zip - contains the IDS policy. This policy is an "after-the-fact" IDS for monitoring important significant events and optionally taking remediation actions on events of interest.

   • NetBackup Appliance Prevention Policy.zip - contains the IPS policy. This policy is an "in-line" IPS that can proactively block unwanted resource access behaviors before they can be acted upon by the operating system.

   Note:

   These policies help to validate the events that take place on an appliance and can be monitored by using the Monitor > SDCS Events page in the unmanaged mode, or by using the SDCS management console in the managed mode.

5. After you have set up the SDCS server and connected the appliance to it, use the SDCS management console to apply the IPS and IDS policies.

   See Connecting to the SDCS server.

   For instructions on how to apply policies using the SDCS management console, refer to the Symantec Data Center Security: Server Advanced Administrator's Guide at the following location: http://www.symantec.com/docs/DOC7979

   Warning:

   You must apply the downloaded IPS and IDS policies as soon as you connect the appliance to the SDCS server. Without applying the policies, there won't be any intrusion prevention and intrusion detection policies on the system to be enforced by the SDCS agent.