Protection rules define how ADRA NDR prioritizes and responds to a potential attack. You can configure ADRA NDR to automatically quarantine specific IP addresses whenever an attack is detected, and prioritize the important of each protection rule.

By default, ADRA NDR includes a rule that monitors and notifies administrators of all potential attacks. This rule cannot be deleted.