Network rules consist of rule sets from Layer 2, Layer 3, and Layer 4. Multiple rules can be applied at the packet level to a Decoder. Rules can be applied to multiple layers (for example, when a network rule filters out specific ports for a specific IP address). You can create and manage network rules in the Services Config view > Network Rules tab.
Supported Meta Keys in Network Rule Conditions
The following table describes the meta keys that Security Analytics supports for use in network rule conditions.