Use these procedures to create and modify policies to apply to your deployed sensors.

Create a Policy

You can add policies to assign to your deployed sensors.

Procedure

  1. On the left navigation pane, click Enforce > Policies and click Add Policy.
  2. Name the policy, enter a short description for that policy, and copy the settings from an existing policy.
    By default, you are presented with the default policy from the Copy settings from drop-down menu.
  3. Set the target value of the endpoints to which this policy will be assigned.

    Target value helps specify the importance of assets included in a policy. High or critical increases alert severity scores. Low decreases severity scores. Medium is neutral and does not affect severity scores.

  4. Click Save.

What to do next

To modify the configuration of a policy, select the policy on the Policies page, change its current settings in the General, Prevention, Local Scan, and Sensor tabs, and click Save.

Copy a Policy Rule

You can copy policy rules from a source policy to other policies.

Note: The following procedure copies a Blocking and Isolation policy rule. You can perform the same steps (modifying Step 2 appropriately) to copy rules from other Policy page tabs and sections.

Procedure

  1. On the left navigation pane, click Enforce > Policies, and select the policy from which you want to copy rules.
  2. On the Prevention tab, expand Blocking and Isolation and click the copy icon next to the rule.
  3. Select either of the following.
    • To copy the rule to all policies, click All Policies.
    • To search for and select specific policies, click Select Policies.
    You can select multiple policies, one at a time.
  4. Click Copy.

Results

You receive a confirmation message for the policies update.
Note:

If the rule you are copying conflicts with any rules in a destination policy, a modal will let you manage the rule conflicts. You can replace or skip a specific rule, or you can replace or skip all conflicting rules at once by selecting the Apply selection to all conflicts checkbox.