Configuring Rule Latency Thresholding
By default, latency-based performance settings for both packet and rule handling are automatically populated by the latest deployed intrusion rule update, and we recommend that you do not change the default.
Procedure
1 |
In the access control policy editor, click Advanced. In the new UI, select Advanced Settings from the drop-down arrow at the end of the packet flow line. |
2 |
Click Edit ( If View ( |
3 |
Click Rule Handling in the Latency-Based Performance Settings pop-up window. By default, Installed Rule Update is selected. We recommend using this default. The values displayed do not reflect the automated settings. |
4 |
If you choose to specify custom values:
|
5 |
Click OK. |
6 |
Click Save to save the policy. |
What to do next
-
If you want to generate events, enable latency rules 134:1 and 134:2. For more information, see Intrusion Rule State Options.
-
Deploy configuration changes.