Adding post-training automation
After your system is trained and running, the trust evaluator continues to monitor all of your connections, and displays them in the connections table.
For a trained system, you can determine the actions to take when connections are marked as trusted, untrusted, or evaluated (but not categorized as trusted or untrusted).
- Select Automation, and then, for each category type, select an appropriate action. For more information about the available actions, see Policy rule actions.
- When you are done, click Save to save your changes and close the Automation window.
Deciding when to use automation depends on how your site is configured. However, some guidelines
for automation are as follows:
- Before you enable automation, review all of your connections to ensure that both trusted and untrusted connections align with your expectations.
- Guardium suggests that you ignore trusted connections only for trusted group input connections or for trusted connections that you review regularly.
- If you set untrusted connections to one of the S-GATE Session Terminate actions, be aware that your users may notice if some connections are terminated.