Endpoint Protection

I'm just starting into the Symantec realm, so some things are new to me.

I've just seen something in the Network Threat Protection Traffic log that I've not seen before.
Do I have a intrusion or have I just missed something that I should have paid attention to?

GUI%GUICONFIG#SRULE@NBENABLEOTHER#ALLOW-TCP

GUI%GUICONFIG#SRULE@NBENABLEYOU#ALLOW-UDP

Where are these configured?
Any advice would be appreciated - even "pay more attention to..." or "look in xxx.pdf".

 service1.symantec.com/SUPPORT/ent-security.nsf/2326c6a13572aeb788257363002b62aa/b2d2e3efd9fffc87802574590048033e/$FILE/Default.dat_export.doc

I see where these items are coming from, but a foolish couple of questions:

Is this file from the default.dat? if so, the Symantec install guide indicates that this file is no longer used in the version 11.x, so I'm confused in this regard.

How did this file get generated? I would like to see what my system is set for.

Finally, is this setting something that can be changed (but I'm not sure if it *should* be changed...)? I've looked at the various docs but I see nothing that tells me exactly what this setting is used for.


Many thanks for your help so far, Vikram!