Chapter 4 Quick Start Configuration

Configure a Policy

Configure a Policy

Generally, when you configure a policy, you are combining multiple rule modules under a common name. That policy name is then attached to a group of hosts and it uses the rules that comprise the policy to control the actions that are allowed and denied on those hosts. You can have several different types of rules in a rule module and consequently within one policy.

The policy level is the common ground by which host groups acquire the rules that make up their security policy. You can attach rule modules of differing architectures to the same policy. This way, you can configure a task-specific, self-contained, inclusive policies across all supported architectures (Windows, Solaris, Linux) for software that is supported on all platforms.

Note Management Center for Cisco Security Agents ships with preconfigured policies you can use if they meet your initial needs. If you use a preconfigured policy, you do not have to create your own policy as detailed in the following pages.

To configure a policy, do the following.

Step 1 Move the mouse over Configuration in the menu bar of CSA MC and select Policies from the drop-down menu that appears. The policy list view appears.

Step 2 Click the New button to create a new policy entry. This takes you to the policy configuration page.

Step 3 In the available policy configuration fields, enter the following information:

Name—This is a unique name for this policy grouping of rule modules. Names are case insensitive, must start with an alphabetic character, can be up to 64 characters long and can include alphanumeric characters, spaces, and underscores. For this exercise, enter the name Quarantined Applications.

Description—This is an optional line of text that is displayed in the list view and helps you to identify this particular policy.

Step 4 Click the Save button.

 

Installing Management Center for Cisco Security Agents 5.2

4-18

78-17916-01

Page 118
Image 118
Cisco Systems DOC-78-17916 manual Configure a Policy