Create Posture Rule using Template
Create Posture Rule using Template
You can create new rules using templates with predefined NGL query definition, category, remediation steps, and description. You have to fill the variable values into the template with custom values. You can see the list of templates supported in SSPM as follows:
-
Log in to the Netskope tenant UI.
-
Navigate to Policies > Security Posture. Then, click the SaaS tab. The Security Posture page opens.
-
Click the Rules tab.
-
Click Add Filter, select the filters as Rule type = Template. You will see a list of rule templates supported by SSPM.
To create a SaaS security posture rule using the SSPM templates, follow the procedure:
-
Log in to the Netskope tenant UI.
-
Navigate to Policies > Security Posture. Then, click the SaaS tab. The Security Posture page opens.
-
Click the Rules tab.
-
Click New Rule. The New Custom Rule page opens.
-
Enter the Rule Name.
-
Click on the Import from Rule button.
-
Search “[template]” text in the search bar. You will see a list of rule templates.
-
Select any rule template and click OK. The template will have predefined definition, category, remediation and description.
-
You need to update the variable values in the template for it to work. For example, if you import “[Template] Lock mobile devices after a period of inactivity”, you will have to update the variable values in the double curly braces i.e. {{ .PwdTimeountInt }}, {{ .PwdMinutesInt }}, {{ .PassCodeTimeoutInt }} and {{ .PassCodeMinutesInt }}.
-
Click Validate Definition in the Definition tab to validate the rule and fix any syntax errors.
-
Click Save to save the rule.
-
The rule is displayed in the Rules tab.
-
On the Security Posture page, click Apply Changes.
