Forum Discussion

33boston_223's avatar
33boston_223
Icon for Nimbostratus rankNimbostratus
Feb 18, 2015

ASM - Automatic Policy Building duration

In the process of creating a security policy via automatic policy builder with a learning speed of medium and have a couple of newbie questions.

 

  • The policy builder has now been stablizing for aproximately a month.....is this normal for it to take this long?
  • Should I be basically leaving the policy alone until it has stabilized or should I be manually editing the policy during this period?

Thanks!

 

5 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus

    33boston,

     

    Not sure there is a normal with Real Policy Builder I'm afraid. In essence it depends on the traffic levels you have.

     

    I'd check the Policy Builder settings for medium to see if the metrics here suit your environment. You can select Advanced and tweak this to help.

     

    Also, do you have any configured trusted IPs? The metrics are a lot lower here for loosening & stabilizing as it should only be good traffic. I'd recommend this if you can.

     

    Finally, if you're confident on the found entities then you can stop the policy builder and manually tweak the policy. You could then turn it back on. This is certainly an option.

     

    Hope this helps, N

     

  • Thanks Nathan.That's what I was basically trying to figure out. There's no rush, so I can let it do its thing I just wasn't sure if there were manual tasks I should be performing during this build process which was making it take longer than I had expected but doesn't sound like its required.

     

    I selected All for Trusted IP addresses during the policy build wizard (staging environment) so I think I'm good there.

     

    Thanks for all your help!

     

    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      No problem. Glad I could help. N
    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      No problem. Glad I could help. N
    • nathe's avatar
      nathe
      Icon for Cirrocumulus rankCirrocumulus
      No problem. Glad I could help. N