Configure Threat Defense Service Policies
You can use Threat Defense Service Policies to apply services to specific traffic classes. For example, you can use a service policy to create a timeout configuration that is specific to a particular TCP application, as opposed to one that applies to all TCP applications. A service policy consists of multiple actions or rules applied to an interface or applied globally.
Procedure
| 1 |
Choose , and click Edit ( |
| 2 |
Click Advanced Settings from the More drop-down arrow at the end of the packet flow line. |
| 3 |
Click Edit ( A dialog box opens that shows the existing policy. The policy consists of an ordered list of rules, separated between global rules (which apply to all interfaces) and interface-based rules. The table shows the interface object and extended access control list name (which combined defines the traffic class for the rule), and the services applied. |
| 4 |
Do any of the following:
|
| 5 |
Click OK when you are finished editing the policy. |
| 6 |
Click Save on Advanced window. The changes are not saved until you click save. |
) for the access control policy whose Threat Defense Service Policy you want to edit.
) to delete a rule.