Working with Predefined Security Policy Rules (Posture Checks)

This article explains how to create effective security polices with predefined policy rules.

Overview

Predefined Policy Rules are use case driven security posture checks to simplify the creation of security policies. To reduce the risk of misconfiguration, with a single click they provide ready-made rules based on common security risks, compliance requirements, and best practices. 

This enables you to quickly enforce effective security controls and meet compliance standards and data sovereignty laws without designing the policy from scratch or requiring deep product knowledge or security expertise.

The predefined rules are listed on the Best Practices page. Each predefined rule is labeled by use case or a compliance standard, enabling you to easily identify the security risk it addresses. After selecting a rule, you can open the configuration wizard to guide you through the configuration process, making advanced security policies easier to deploy and manage. For more information about Best Practices, see Reviewing Best Practices for Your Account.

Use Case

An administrator wants to protect the network from risky application usage however, they are unsure which policy rules are best suited for the scenario and how to configure them correctly.

With Predefined Policy Rules, the admin selects the Unauthorized SaaS Access use-case-driven rule from the Best Practices page. The rule includes predefined logic based on widely accepted security practices, eliminating the need to build a policy from scratch. The configuration wizard guides them through the configuration process to ensure it is configured correctly.

This allows the admin to rapidly enforce effective security controls, reduce configuration errors, and maintain a strong security posture with minimal effort.

Configuring Predefined Security Policy Rules

Predefined policy rules are Best Practices that can be applied using the configuration wizard.

Predefined_rules.png

To configure predefined security rules:

  1. From the navigation menu, select Home > Best Practices.
  2. Use the Label column to identify the use case or compliance framework you want to create a rule for.
    You can filter the table by use case or compliance framework. 
  3. Click on the rule.

    The Best Practices Check Review panel opens.

  4. Click Review & Resolve.

    The relevant policy is displayed with the configuration wizard panel open.

  5. Select the rules you want to apply and click Start Review.

    With a single click, a predefined rule is displayed.

  6. (Optional) Review and customize the rule to meet your requirements.
  7. Select Apply & Continue.
  8. Click Publish.

Was this article helpful?

0 out of 0 found this helpful

0 comments