Create a Security Posture Rule
Create a Security Posture Rule
To create a security posture rule:
- Log in to the Netskope tenant UI.
- Navigate to Policies > Security Posture.
The Security Posture page opens.
- Click the Profiles & Rules tab.
- Click New Rule.
The New Custom Rule page opens.
- Under Rule Name, enter a rule name.
- Under Cloud Platform, select a SaaS app or public cloud service and click Save & Continue.
- Under Severity, select the rule severity from the drop-down list. The available options are Critical, High, Medium, and Low. Select the level of severity you want to assign to this rule.
- Under Definition, enter a rule definition using Domain Specific Language (DSL). For information on DSL, see Custom Rules using Domain Specific Language.
Note
As part of limited GA, custom rules using domain specific language are not supported for Workday.
Alternatively, use the Import from Rule option to import and modify an existing rule.
- Click Save as Draft to continue working on the rule or Save to save the rule.
- Click Validate Definition to validate the rule and fix any syntax errors.
- Click the Compliance tab and specify the compliance standards that the rule must satisfy.
- Standard: The name of the compliance standard, like CIS Benchmark v3.0.1, NIST-CSF, etc.
- Section: The section of the document that describes the compliance standard.
- Control: The section control of the document that describes the compliance standard.
For example, the predefined rule
BPR-SALESFORCE-0-19 Streaming is enabled for real time events, and at least 1 client is subscribed to the event stream
is defined in the Best Practices Salesforce document. In this example, BPR-SALESFORCE is the compliance standard, 0 is the section, and 19 is the control. - Click +Add to specify a new compliance standard that the rule must satisfy. Click Save as Draft to continue working on the rule or Save to save the rule.
- Click the Other tab to specify a rule description. Click Save as Draft to continue working on the rule or Save to save the rule.
The rule is displayed in the Rules section of the Profiles & Rules page.
- On the Security Posture page, click Apply Changes.