Policy Browser

Options

The Options section provides the following filters.

• Select the Severity check box, then click the drop-down and select a comparison operator. Click the second drop-down and select a severity.

• Click the Enabled drop-down.

  • Select Any to display both enabled and disabled policies.

  • Select Enabled to display only policies that are enabled.

  • Select Disabled to display only policies that are disabled.

• Click the Technology Type drop-down.

  • Select All to display all policies.

  • Select Flow to display policies that trigger based on flow data.

  • Select Metric to display policies that trigger based on non-flow data.

• Select the Webhook check box to allow you to filter policies that have Webhook configured on trigger (Trigger Conditions), clear (Clear Conditions), or both. The default is both (Trigger and Clear Conditions).

Search

The Search section allows the search capability based on the following.

• In the Search Text field, enter text that appears in the policy name and/or the policy description and/or the policy folder name and select the corresponding Policy Name and/or Description and/or Policy Folder Name check box.

• In the Search ID field, enter a policy identifier and select the Policy ID option or enter a threshold identifier and select the Threshold ID option.

Specify

The Specify section provides the following filters. Most selections are dependent on the preceding selection.

• Click the Technology type drop-down.

  • Click the Object Type drop-down and select the object type that contains the indicator.

  • Click the Subtype drop-down and select a subtype.

  • Click the Indicator drop-down and select the indicator that triggers the policy.

  • Select All to display all policies and click the Please select a grouping drop-down.

    • Select Device Groups then click the corresponding drop-down and select a device group/device type.

    • Select Object Groups then click the corresponding drop-down and select an object group.

  • Select Flow to display policies that trigger based on flow data.

    • Click the Please select a grouping drop-down.

      • Select Device Groups then click the corresponding drop-down and select a device group/device type.

      • Select Object Groups then click the corresponding drop-down and select an object group.

    • Click the Direction drop-down to choose one of the following options - Any, Ingress, or Egress.

    • Click the Aggregated view drop-down and choose an option from the list provided.

  • Select Metric to display policies that trigger based on non-flow data.

    • Click the Please select a grouping drop-down.

      • Select Device Groups then click the corresponding drop-down and select a device group/device type.

      • Select Object Groups then click the corresponding drop-down and select an object group.

    • The following fields are available when a group is selected.
      

      • Click the Plugin drop-down and select the plugin that polls the indicator for the policy you seek.

Buttons

• Click Apply Filter button to apply the filter settings.

• Click Clear Filter button to remove all filters and to display all policies in the list.

• Click on to collapse or to uncollapse the Filter section.

Create Policy

Click to create a new policy. Please refer to Policy Editor for details.

Delete Selected

Select one or more policy IDs in the list and click to delete the policies selected.

Webhook Definitions

Click to create / configure, modify, or delete webhook definitions. For details, please refer to Webhook Definition Manager.

Assign Webhooks

Click to assign webhook definitions to the policies selected. Below you will find a few scenarios.

Search

The search capability allows user to search the table for the word enter in the field.

List of Policies

The table provides a list of policies created with the following columns.

• ID - Displays the internal identifier for the policy.

• Policy Name - Displays the policy name.

• Description - Displays the policy description.

• Technology Type - Displays Flow for policies triggered by flow data or displays Metric for policies triggered by all other non-flow data.

• Severity - Displays the severity level for alerts the policy triggers.

• Flags - Displays flags when you define the policy to be emailed or to be scheduled or if the webhook exists.

  • - Email

  • - Schedule

  • - Webhook

• In addition to the data columns, the following controls appear in the Actions column.

  or click a policy name - Click to access the Policy Editor page.

  - Click to delete the selected policy.

Other

Click . If no policy ID is selected, you will only be able to choose Create Policy to create a new policy. All other options from the drop-down will be unavailable.

If you select an existing policy and click , you will be able to manage the selected policy and other options such as, Edit, Enable/Disable, Delete, Assign Webhooks, and Clear Webhooks, from the drop-down will be available.

• Select Create Policy to create a new policy on the Policy Editor.

  Create Policy is only available when a folder under Policy Folder > All Policies is selected.

• Select Edit to edit an existing policy on the Policy Editor.

• Select Enable to enable the policies you select.

• Select Disable to disable the policies you select. Disabled policies display in light text and do not trigger alerts or traps.

• Select Delete to delete the policies you select.

• Select Assign Webhooks to assign webhook(s) to the policies selected. A pop-up appears; you can apply one or more webhooks to the selected policies. Webhook definitions must be created before they can be applied. To configure webhook definitions, please refer to Webhook Definition Manager for details. For details on Assign Webhooks, please refer to section Assign Webhooks above.

• Select Clear Webhooks to clear webhook(s) assigned to the policies selected. A pop-up appears to confirm the deletion of the webhook(s) assigned to the policies selected. Click Yes to confirm the deletion and No to cancel the deletion.