Rules include security posture criteria, default responses associated with OfficeScan clients, and actions that OfficeScan clients and the Policy Server perform.