[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Creating a Reaction Policy

To create a reaction policy, follow these steps:

From My AIM Home, Incident Manager, Reaction Policies, Organizations, Incident Detail page, Device Group page, or Proxy Device Group page, click Create Policy.
The Reaction Policy page appears.
Type a reaction policy name, then select a trigger. For more information about the Reaction Policy page, see Parameters for Creating a Reaction Policy.
Type in the filter parameters. Different filters are supported for incident and intelligence trigger types. The available filters change when you select the trigger type. If an incident trigger type is selected, see Parameters for Creating a Reaction Policy for more information. If an intelligence trigger type is selected, see Intelligence Trigger Type Reaction Policy Filter Parameters for more information.
Fill in the fields for the action you want AIM to take when the reaction policy criteria are met. For more information, see Parameters for Creating a Reaction Policy.
Click Save Settings at the top of the Reaction Policy page. For more information on the Save Settings command button, see Actions for Creating a Reaction Policy. The Reaction Policies table appears with the new reaction policy.
For more information on the Reaction Policy table, see Reaction Policies Table Command Button Descriptions and Reaction Policies Table Column Descriptions.

Create Reaction Policy Page Descriptions

Actions for Creating a Reaction Policy

Table 91 describes the Reaction Policy page actions.

Table 91: Create Reaction Policy Page Button Descriptions

Name	Description	Privilege Required	Enabled/Disabled	Results
Save Settings	Saves the settings for the policy being created or modified.	Reaction Policy	Always Enabled	Navigates user to the previous page the user was on.

Parameters for Creating a Reaction Policy

Table 92 describes the parameters for creating a Reaction Policy.

Table 92: Create Reaction Policy Page Field Descriptions

Column	Description	Privilege Required to Modify	Range/Length	Default
Name	Name of policy, which must be unique within all the policies owned by the same user	Reaction Policy	32 characters	N/A
Trigger Type	Specifies the type of trigger required for this policy to be applied. The fields in the filter table dynamically change according to which filters the trigger type selected supports.	Reaction Policy	New Incident Detected, Incident Reported to Juniper, JTAC Case ID Assigned, JTAC Case Updated, New Intelligence Update Received	N/A
Filters:
Priority	Matches priority of incident	Reaction Policy	256 characters	Blank
Device Name	Matches name of the device the incident occurred on	Reaction Policy	256 characters	Blank
Serial Number	Matches serial number of the device the incident occurred on, the serial number specified in the intelligence message	Reaction Policy	256 characters	Blank
Has the words	Matches the specified words against any of the fields in the incident or the intelligence update	Reaction Policy	256 characters	Blank
Doesn't have	Makes sure the specified words are not in any of the fields of the incident or the intelligence update	Reaction Policy	256 characters	Blank
Actions:
Send Email to	List of e-mail addresses that receive an e-mail message if the policy is triggered and passes the specified filter. E-mail addresses should be separated by commas.	Reaction Policy	65535 characters	Blank
Send Text Message to	List of e-mail addresses that receive a text message if the policy is triggered and passes the specified filter. E-mail addresses should be separated by commas. (E-mail addresses are used to send the text message.)	Reaction Policy	65535 characters	Blank
Send Traps to	The table contains a list of all the trap destinations defined in the application. An SNMP trap will be sent to the destinations that are selected if the policy is triggered and passes the specified filter.	Reaction Policy	N/A	N/A

Intelligence Trigger Type Reaction Policy Filter Parameters

Table 93 describes the parameters for the filters table when Intelligence Trigger Type is selected.

Table 93: Intelligence Trigger Type Reaction Policy Filter Parameters

Column	Description	Privilege Required to Modify	Range/Length	Results
Intelligence Update Type	Matches against type of intelligence message	Reaction Policy	256 characters	Blank
Products Affected	Matches against field in alert intelligence messages	Reaction Policy	256 characters	Blank
Platform Type	Matches against Platforms Affected field in alert intelligence messages or against platform type field in information intelligence messages	Reaction Policy	256 characters	Blank
Keywords	Matches against Keyword field in information intelligence messages	Reaction Policy	256 characters	Blank
Serial Number	Matches serial number of the device the incident occurred on or the serial number specified in the intelligence message	Reaction Policy	256 characters	Blank
Software Version	Matches against software version field in the information intelligence messages	Reaction Policy	256 characters	Blank
Hardware Version	Matches against hardware version field in the information intelligence messages	Reaction Policy	256 characters	Blank
Devices Impacted	Drop-down component indicating if the filter is enabled or disabled.	Reaction Policy	Enabled, Disabled	Disabled
Has the words	Matches the specified words against any of the fields in the incident or the intelligence update	Reaction Policy	256 characters	Blank
Doesn't Have	Makes sure the specified words are not in any of the fields of the incident or the intelligence update	Reaction Policy	256 characters	Blank

Reaction Policies Table Description

Reaction Policies Table Command Button Descriptions

Table 94 describes the Reaction Policies table command buttons.

Table 94: Reaction Policy Table Command Button Descriptions

Element Name	Description	Privilege Required	Enabled/Disabled	Results
Create Policy	Creates a new policy	Reaction Policy	Enabled if privilege	Openscreate reaction policy page
Enable	Enables any selected policies	Reaction Policy	Enabled if privilege and one or more products selected	Status of selected policies is changed to Enabled
Disable	Disables any selected policies	Reaction Policy	Enabled if privilege and one or more products selected	Status of selected policies is changed to Disabled
Delete	Deletes the selected policies	Reaction Policy	Enabled if privilege and one or more products selected	Removes the selected policies from the table

Reaction Policies Table Column Descriptions

Table 95 describes the columns in the Reaction Policies table.

Table 95: Reaction Policies Table Column Descriptions

Element Name	Description	Privilege Required to Modify	Range/Length	Default
Name	Name of policy that must be unique within all policies owned by the same user.	Hyperlink requires Reaction Policy privilege	32 characters	N/A
Owner	User that created the reaction policy.	N/A	N/A	N/A
Status	Indicates whether the reaction policy is running.	N/A	Enabled or Disabled	N/A
Trigger Type	Specifies the type of trigger required for the reaction policy to be applied.	N/A	New Incident Detected, Incident Reported to Juniper, JTAC Case ID Assigned, JTAC Case Updated, New Intelligence Update Received	N/A
Filter	Specifies the filter that must be passed for this reaction policy.	N/A	See Table 92.	N/A
Action	Specifies the action taken if this reaction policy is triggered and the filter has passed.	N/A	SeeTable 92.	N/A

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]