Page Comparison

...

Before you begin, you must:

• Know how to Create a starter policy with learn modeStarter Policy with Learn Mode
• Review Vormetric Policy Planning
• Log into the DSM as Security Administrator

...

1. Log into your DSM as the Security Administrator. 
2. In the menu bar, click Policies. 
   
   
   
   
3. Click Add Online Policy. 
4. In Name, enter a descriptive name. 
   • Once you enter a name for a policy, you cannot change it. 
5. In Description, enter a short description to help identify the purpose of this policy, such as Database_Policy. 
   • You can change this description at a later time. 
6. (Optional) Select Learn Mode. 
   • Armor recommends that you select Learn Mode when you create and apply a new policy. 
   • The cloning feature allows you to create an identical policy for future GuardPoints that require the same access rules.
   • To learn more about Learn Mode, see Create a starter policy with learn modeStarter Policy with Learn Mode.
7. Under Security Rules, click Add. 
   
   
   
   
8. In the window that appears, there are six options: 
   • Resource - Specifies which folders or files in a GuardPoint can be accessed. 
   • User - Specifies the users or user groups that can access the GuardPoint.
   • Process - Specifies the executables that can access the GuardPoint, such as usr/lib/exec/mysql.exe.
   • When - Specifies the date and time range when files can be accessed.
   • Action - Specifies the allowed file action, such as read, write, remove, rename, make directory, etc.
   • Effect - The following options correspond to Effect: 
     • Permit - Permits access to the data.
     • Apply Key - Enables users and processes the ability to encrypt and decrypt data inside of the GuardPoint.
     • Audit - Creates an entry in the DSM message logs that describes what data is being accessed, when the attempt was made, and the security rule being applied. 

     • Deny - Denies access to the data. You can also deny users or processes by simply leaving them out of the policy rules. 
       
       
       
       
       
       

       Note
       A blank field indicates the value of All. Also, note the policy rules are read in a descending order, similar to firewall rules.

9. To learn more about each of these options, continue to the appropriate section below. 
   
   

...

Next Steps

Next, Introduction to GuardPoints and the Copy Method.

...