ASM Policy Building

Hi

Hi , i need answer for Q3 & Q4

hey SSHSSH,

 

 

Sorry - i'm not logged into the box at the moment, but there is a place under the ASM policies section that allows you to set the staging time of a policy. One thing i've grown to making into habbit is always making policies in transparent mode - always - this at least gives me a default window of time before the policy actually goes into production. I think that amount of time is seven days. the item you want to look for though is staging time. i believe if you pull down the asm config pdf file and search on times or staging you'll find it - but, that's what it's called: staging time.

 

 

hope this helps.

 

 

also - after creating policies transparent mode will pick up any security item set to alarm. for example: using a simple default policy has certain attack signatures checked as "alarm". depending on where you have the appliance sitting on your network it will begin to alarm/log items that fail a signature check.