Create Posture Rule using Template
Create Posture Rule using Template
You can create new rules using templates with predefined NGL query definition, category, remediation steps, and description. You have to fill the variable values into the template with custom values. You can see the list of templates supported in SSPM as follows:
-
Log in to the Netskope tenant UI.
-
Navigate to Policies > Security Posture. Then, click the SaaS tab. The Security Posture page opens.
-
Click the Rules tab.
-
Click Add Filter, select the filters as Rule type = Template. You will see a list of rule templates supported by SSPM.
To create a SaaS security posture rule using the SSPM templates, follow the procedure:
-
Log in to the Netskope tenant UI.
-
Navigate to Policies > Security Posture. Then, click the SaaS tab. The Security Posture page opens.
-
Click the Rules tab.
-
Click Add Filter, select the filters as Rule type = Template. You will see a list of rule templates supported by SSPM.
-
Select a rule template you want to work on. The Template Details dialog box appears.
-
Click on Import to Rule button at bottom right corner of the dialog box. The New Custom Rule dialog box appears.
-
The template will have predefined rule name, severity, definition, category, and description. You can modify the fields as per your requirement.
-
You need to update the variable values in the template for it to work. For example, if you import “[Template] Lock mobile devices after a period of inactivity”, you will have to update the variable values in the double curly braces i.e. {{ .PwdTimeountInt }}, {{ .PwdMinutesInt }}, {{ .PassCodeTimeoutInt }} and {{ .PassCodeMinutesInt }}.
-
Click Validate Definition in the Definition tab to validate the rule and fix any syntax errors.
-
Click Save to save the rule.
-
The rule is displayed in the Rules tab.
-
On the Security Posture page, click Apply Changes.
