Adding a New Rule using Template

You can create new rules using templates with predefined NGL query definition, category, remediation steps, and description. You have to fill the variable values into the template with custom values.

To see the list of templates supported in SSPM, follow the procedure:

1. Log in to your Netskope tenant UI.

2. Navigate to Policies > SaaS Security Posture Management.

3. Navigate to Rules tab.

4. Click Add Filter, select the filters as Rule type = Template. You will see a list of rule templates supported by SSPM.

To create a SaaS security posture rule using the SSPM templates, follow the procedure:

1. Log in to your Netskope tenant UI.

2. Navigate to Policies > SaaS Security Posture Management.

3. Navigate to Rules tab.

4. Click Add Filter, select the filters as Rule type = Template. You will see a list of rule templates supported by SSPM.

5. Select a rule template you want to work on. The side panel opens with the Template Details.

   

6. Click Create Rule From Template in the top right corner. The New Custom Rule side panel opens

7. The template will have predefined rule name, severity, definition, category, and description. You can modify the fields as per your requirement.

8. You need to update the variable values in the template for it to work. For example, if you import “[Template] Lock mobile devices after a period of inactivity”, you will have to update the variable values in the double curly braces, i.e. {{ .PwdTimeountInt }}, {{ .PwdMinutesInt }}, {{ .PassCodeTimeoutInt }} and {{ .PassCodeMinutesInt }}.

   

   

9. Click Validate Definition in the Rule Definition tab to validate the rule and fix any syntax errors.

10. Click Save.

11. The rule is displayed in the Rules tab.

12. View and Apply pending changes.