Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Investigating Rules that Allow Communication to the Internet

SUMMARY In Policy Monitor, device tests are used to identify rules on a device that violate a defined policy, or changes that introduce risk into the environment.

Device tests are used to identify rules in a device that violate a defined policy or changes that introduce risk into the environment. From a network security perspective, it is important to know about changes to device rules. A common occurrence is when servers get unintentional access to the Internet because of firewall change on the network. JSA Risk Manager can monitor for rule changes on network devices by creating a policy monitor question based on the device rules.

Create a Policy Monitor question that checks what devices have access to the Internet.

  1. Click the Risks tab.
  2. On the navigation menu, click Policy Monitor.
  3. From the Actions menu, select New Devices/Rules Question.
  4. In the What type of data do you want to return, click Devices/Rules.
  5. From the Importance Factor list, select the level of importance that you want to associate with your question.
  6. In the Which tests do you want to include in your question section, select the add (+) icon next to the test allow connections to the Internet. This action adds the test to your question.
  7. Click Save Question.
  8. Select the Policy Monitor question that you created for monitoring device rules.
  9. Click Submit Question.
  10. Review the results to see whether any rules allow access to the Internet.
  11. Monitor your protected assets by putting the Policy Monitor question into monitoring mode.