Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This article explains what the Learn Mode is and how to create a starter policy with the Learn Mode function enabled.


Video Tutorial

...

Widget Connector
overlayyoutube
_templatecom/atlassian/confluence/extra/widgetconnector/templates/youtube.vm
width400px
urlhttps://www.youtube.com/watch?v=Ch6KwHqTuyk
height300px


Prerequisites

...

Before you begin, you must:

  • Have a basic understanding of the Vormetric product

  • Have a basic understanding of how to access the Data Security Manager (DSM) and the administrative accounts

  • Complete the Create Encryption Key step


What is Learn Mode?

...

A Vormetric policy dictates what users or processes are allowed into a GuardPoint based on a list of rules and the order of those rules. Any attempts to access a Vormetric GuardPoint will be filtered by these rules in the policy. For example, a specific user or process cannot access a GuardPoint unless there a rule in a policy that specifically offers access. Without a specific rule for access, the attempt will be denied and logged.

...


Creating an Online Learn Mode Policy

...

  1. Log into your DSM as a Security Administrator.

  2. At the top, click Policies to create a new policy and to see a list of existing policies. For the purpose of this exercise, you can disregard the drop-down menu items.

    Image Modified

  3. Click Add Online Policy, as shown below. Please note, the appliance will not let you create a policy until you first create a key.

    Image Modified

  4. In Name, enter a descriptive name for your policy. Please note that you cannot change the name of a policy after the name has been created.

    Image Modified

  5. Mark the Learn Mode box, review the message in the pop-up window, and then click OK in the pop-up window.

    Image Modified

  6. Under Key Selection Rules, click Add. This is the production key that will be used to encrypt and decrypt data being guarded by this policy.

    • For your reference, the image below shows a new policy that has been named with a descriptor and the Learn Mode enabled. No key or security rules have been added yet.

      Image Modified

  7. Next to Key, click Select to browse your list of keys.

    Image Modified

  8. Under Selected, mark the button that corresponds to newly created production key, and then Select Key.

    Image Modified

  9. The production key you selected will populate the Key field. Click OK.

    Image Modified

  10. The production key will partly populate the Add Online Policy window. Under Security Rules, click Add to add the catch-all rule.

    Image Modified

  11. Next to Effect, click Select.

    Image Modified

  12. Mark Deny, Audit, and Apply Keys, and then click Select Effect.

    Image Modified

  13. Your selections will populate the Effect field. Click OK. This is now your catch-all rule.

    Image Modified

  14. Click Apply to save your newly created catch-all rule, and then click OK.

    • For your reference, when you click OK, any changes will be saved, and you will be redirected to the list of existing policies.

      Image Modified

  15. Review your newly created policy in the list.

    Image Modified


Next Step: Introduction to Policy Rules

...

Was this helpful?

Topics Discussed

Table of Contents
maxLevel3
minLevel3