Use these procedures to create and modify policies to apply to your deployed sensors.

Create a Policy

You can add policies to assign to your deployed sensors.

Procedure

  1. On the left navigation pane, click Enforce > Policies and click Add Policy.
  2. Name the policy, enter a short description for that policy, and copy the settings from an existing policy.
    By default, you are presented with the default policy from the Copy settings from drop-down menu.
  3. Set the target value of the endpoints to which this policy will be assigned.

    Target value helps specify the importance of assets included in a policy. High or critical increases alert severity scores. Low decreases severity scores. Medium is neutral and does not affect severity scores.

  4. Click Save.

What to do next

To modify the configuration of a policy, select the policy on the Policies page, change its current settings in the General, Prevention, Local Scan, and Sensor tabs, and click Save.

Duplicate a Policy

You can duplicate a policy and then make changes to the newly created policy. For example, you can copy the Standard policy settings into a new policy that you can then modify and apply to endpoints.

Procedure

  1. On the left navigation pane, click Enforce > Policies and select a source policy.
  2. Click Duplicate Policy.
  3. Name the policy, enter a short description for that policy, and copy the settings from the selected policy.
    By default, you are presented with the policy you are copying from in the Copy settings from drop-down menu.
  4. Set the target value of the endpoints to which this policy will be assigned.

    Target value helps specify the importance of assets included in a policy. High or critical increases alert severity scores. Low decreases severity scores. Medium is neutral and does not affect severity scores.

  5. Click Save.

What to do next

To modify the configuration of a policy, select the policy on the Policies page, change its current settings in the General, Prevention, Local Scan, and Sensor tabs, and click Save.

Modify or Delete a Policy

You can modify or delete created policies.

Note: You cannot delete the built-in policies: Standard, Monitored, and Advanced.

Procedure

  1. On the left navigation pane, click Enforce > Policies.
  2. Select a policy.
  3. Change the policy settings in the General, Prevention, Local Scan, and Sensor tabs.
  4. Click Save.
  5. To delete the selected policy, click Delete Policy and then click Delete.