Page tree

Contents

For BloxOne Threat Defense Cloud to properly apply a security policy, you must define the network scope so BloxOne Threat Defense Cloud knows which external networks, user groups, DNS forwarding proxies, and BloxOne Endpoint groups are affected. All policy rules you define for this security policy will be applied to the entities in the network scope.

To set your network scope for the security policy, complete the following:

  1. On the Network Scope page of the Create New Security Policy wizard, click the Add Source menu and choose one of the following options.

    Note

    For each option, you can choose the applicable objects from the AVAILABLE table and move them to the SELECTED table using theicon. You can click the  icon to select all the objects. You can also search for a specific object using the Search function. To remove an object from the SELECTED table, click the or the  icon. When you have completed your selection, click Add to add the objects, or click Cancel to discard your changes.
    • External Networks: Select this to add external networks to the network scope. For more information, see Configuring External Networks.
    • DNS Forwarding Proxy: Select this to add DNS forwarding proxies to your network scope. For more information about DNS forwarding proxy, see DNS Forwarding Proxy.
    • Endpoint Groups: Select this to add BloxOne Endpoint groups to your network scope. For information about BloxOne Endpoint groups, see BloxOne Endpoint Group Assignment.
    • User Groups: Select this to add user groups to the network scope. The available user groups are those that have been synchronized through the third-party IdP (identify provider) that your admin has configured for access authentication. For more information, see Synchronizing User Groups
  2. For each source you have added, click Add. The source appears in the table. You can click the Add Source menu again to choose another source for your network scope.
  3. After you define your network scope, you can proceed to add policy rules, set precedence order and bypass codes.
  4. Click Next in the wizard to define policy rules. For more information, see Adding Policy Rules and Setting Policy Precedence.

For information about other tasks in creating a new security policy, see the following:


  • No labels

This page has no comments.