SUMMARY Create an asset question to search for assets in the network that violate a defined
policy or assets that introduced risk.
Policy Monitor questions are evaluated in a top-down manner. The order of the questions impacts
the results.
- Click the Risks tab.
- On the navigation menu, click Policy Monitor.
- From the Actions menu, select New Asset
Question.
- In the What do you want to name this question field, type a name for the
question.
- From the Evaluate On list, select one of the following options:
Option |
Description |
Actual Communication |
Includes any assets on which communications were detected that use connections. |
Possible Communication |
Includes any assets on which communications are allowed through your network topology, such
as firewalls. You use these questions to investigate whether specific communications are possible,
regardless of whether a communication was detected. |
- From the Importance Factor list, select the level of importance you want
to associate with this question. The Importance Factor is used to calculate the Risk Score and
define the number of results that are returned for a question.
- Specify the time range for the question.
- From the Which tests do you want to include in your question field,
select the add (+) icon next to the tests you want to include.
- Configure the parameters for your tests in the Find Assets that field.
Configurable parameters are bold and underlined. Click each parameter to view the available
options for your question.
- In the groups area, click the relevant check boxes to assign group membership to this question.
- Click Save Question.