Modify an Existing Policy

Applies to Product: USM Appliance™ LevelBlue OSSIM®

You can modify any existing policy as needed.

To modify an existing policy

  1. From Configuration > Threat Intelligence > Policy, click on the policy you want to update.  

  2. Make any necessary changes in the Policy Conditions and Policy Consequences sections of the page.

    At the top of the page, you can modify the following settings:

    • Policy Rule Name — This is the name given to the policy.

    • Enable — Lets you determine if the policy is active or not. After you save the policy modifications, the changes appear in the Policy List view.

    • Policy Group — Select the policy group with which you want the policy to be associated. To change the default selection, use the list box to select another policy group.

      Policy Configuration page with Enable and Policy Group highlighted.

  3. When finished with your modifications, click Update Policy to save your changes.
  4. Click Reload Policies.

AlienVault OSSIM Limitations: USM Appliance includes more robust policies built into the environment, but you are allowed to customize and build your own rules based on your needs in LevelBlue OSSIM.