user manual

72 CHAPTER 9: USING EVENT RULES
The event rules in Traffix Manager fall into two broad categories:
■ Security — An event is generated when some aspect of network
security may have been compromised.
■ Traffic — An event is generated when a significant change in traffic
patterns is detected.
The various types of event rule are discussed in more detail in the
following section.
Traffix Manager provides a number of predefined event rules that cover
common network issues. You can also add your own event rules, edit
existing event rules and enable/disable them, as described in
“Configuring Event Rules”
on page 75.
The final part of this chapter suggests ways of using the various types of
event rule to implement strategies for managing your network.
Predefined Event
Rules
Traffix Manager is supplied with a number of predefined event rules,
which are applicable to most networks. These event rules generate events
when significant changes occur on the network. They are:
■ Detect new devices on the local network
■ Detect changes on the local network
■ Check for abuse of the Internet connection
■ Detect WEB traffic during working hours
■ Monitor local Notes server traffic
■ Monitor local DNS server traffic
■ Monitor local NFS server traffic
■ Monitor local web server traffic
■ Monitor local SMB (Microsoft) server traffic
■ Monitor local NCP (Novell) server traffic
Local devices are defined in terms of the local DNS domains in which they
reside. See “Local Domain Specification”
on page 130 for more
information.