Netskope Cloud Exchange

Manage Risk Exchange Business Rules

Only an Admin can manage Risk Exchange Business Rules.

Create Risk Exchange Business Rules

Admins can configure Risk Exchange queries towards users, allowing them to specify which users to take actions upon.

  1. In the Risk Exchange module, go to Business Rules.

  2. Click Create New Rule.

    image3.png
  3. Enter the rule name.

  4. Select or enter a query in the alert filter. At least one filter must be selected.

    Filters can be copied from the alert table and applied to a business rule.

  5. Click Save.

    image4.png

Perform Action on Risk Exchange Business Rules

Users can manage all the business rules from a single place on the platform at the Business Rules page. Admin can mute one or multiple business rules, edit the query for business rules, or delete the business rules or Test the Business Rule from this page.

image5.png

Muting a Risk Exchange Business Rule

Muting can be used to temporarily ignore any changes to users or hosts scores that would normally trigger the action workflow.

image6.png

Deleting Risk Exchange Business Rules

To delete a business rule, select the Trash icon on the rule and confirm the action.

image7.png

Add or Delete Muting Rules to Risk Exchange Business Rules

This function is used to mute known and acknowledged changes to a user or host matching some specific criteria. For example, the admin could mute a particular user so that no new actions are performed for that business rule on that user.

image8.png
image9.png

Mapping a Risk Exchange Business Rule to an Action

Users can map business rules with actions so that when a user or host matches a business rule, the configured action will be performed on the user.

Role required: admin

  1. Go to Risk Exchange > Actions.

  2. Click Add Action Configuration.

    image10.png
  3. Select Business Rule, and then Configuration.

  4. Based on the selected configuration, a list of Actions will be populated. Select an action that you want to map to the business rule.

  5. If the action has some required parameters, user will need to fill those out as well.

    image11.png
  6. Enable Generate Alert if you would like to receive alerts in the Ticket Orchestrator module whenever an action is performed. Using this feature, user can receive alerts into your ITSM platform or receive notifications when an action is performed on users or hosts. Note that this feature requires that the Ticket Orchestrator module to be enabled.

  7. Click Save.