Topic
  • 3 replies
  • Latest Post - ‏2013-09-01T06:30:41Z by 1XWY_TS_Teh
vindal0012
vindal0012
13 Posts

Pinned topic Policy with Baseline. What is the use of Baseline?

‏2013-08-25T17:11:53Z |

Hi, anyone could help shed light on the uses and benefits of using a baseline when creating a policy?

  • 1XWY_TS_Teh
    1XWY_TS_Teh
    210 Posts

    Re: Policy with Baseline. What is the use of Baseline?

    ‏2013-08-30T14:20:40Z  

    Well, I don't really recommended for the Baseline. For Baseline, you will require to provide some criteria and Guardium will look back the history and automatically come out the rules based on your criteria and history. However, you will easily gets more than 10 to 20 rules depend on your criteria. And, you can not delete or modify the rules (if I remember correctly). But you can add rules. 

    We used rules for critical activities that you want to be notify or take action immediately. So, you may ask yourself what is the transactions or objects that is critical to your organisation or require to comply to any standard or regulations that your organisation need to adhere to. 

  • vindal0012
    vindal0012
    13 Posts

    Re: Policy with Baseline. What is the use of Baseline?

    ‏2013-08-31T04:33:02Z  

    Well, I don't really recommended for the Baseline. For Baseline, you will require to provide some criteria and Guardium will look back the history and automatically come out the rules based on your criteria and history. However, you will easily gets more than 10 to 20 rules depend on your criteria. And, you can not delete or modify the rules (if I remember correctly). But you can add rules. 

    We used rules for critical activities that you want to be notify or take action immediately. So, you may ask yourself what is the transactions or objects that is critical to your organisation or require to comply to any standard or regulations that your organisation need to adhere to. 

    Thanks for your reply. So what this means that by using a baseline, Guardium will create a new policy which reflects how the previous results were created. From that new policy, you can also add additional rules. If you create a policy without a baseline and without any rules yet, it will do nothing. But if you create a policy with a baseline and without any rules yet, it will still do something based on the criteria you've set for the baseline. Is that corret?

  • 1XWY_TS_Teh
    1XWY_TS_Teh
    210 Posts

    Re: Policy with Baseline. What is the use of Baseline?

    ‏2013-09-01T06:30:41Z  

    Thanks for your reply. So what this means that by using a baseline, Guardium will create a new policy which reflects how the previous results were created. From that new policy, you can also add additional rules. If you create a policy without a baseline and without any rules yet, it will do nothing. But if you create a policy with a baseline and without any rules yet, it will still do something based on the criteria you've set for the baseline. Is that corret?

    Yes, you are correct. By default, Guardium will collect every transaction without any action. So, the action such as alert or ignore or blocking will be based on your the rules defined in the policy.