H3C Technologies H3C SecCenter IPS Manager - Manual (Page 86)

80
Figure 79 Matched event history
On the event history page, click the icon of an archived item to enter the event list page, as shown in
Figure 80 . The page displays details of events that match the analysis policy.
Figure 80 Event list
Return to Custom event management functions .
Modifying a custom event
On the custom event management page shown in Figure 73 , click the icon to enter the page for
modifying the custom event configuration. For descriptions of custom event configuration items, see Table
77 .
Note that the custom event name is not configurable on the page for modifying a custom event.
CAUTION:
•
After you modify a custom event (analysis policy), the related analysis engine restarts, clears its cache,
and starts analysis with the new parameters; however, the archived events are not cleared.
• The SecCenter system synchronizes policy settings every 10 seconds. In other words, it takes up to 10
seconds to validate your modification.
Return to Custom event management functions .
Importing and exporting policies
You can import and export attack protection policies and anti-virus policies from and to devices, and
compare policies.
Configuration guide
From the navigation tree of the IPS management component, select Policy Import/Export under Policy
Management to enter the policy importing and exporting page, as shown Figure 81 . Table 79 describes
the policy import and export management functions.