File Activity policies for UNIX and Windows file servers

File activity policies are used to protect sensitive data on UNIX file servers, Windows file servers,

Using rules for file activity policies
A file activity monitoring policy specifies how Guardium handles different file activity events. Each policy consists of a set of ordered rules. Each rule in a policy defines a conditional action that is taken when the rule matches. The conditional test can be simple, for example a user accesses a specific location, or a complex test that considers multiple conditions. The action ranges from nothing to blocking the event. Multiple grouping and alerting actions can be combined and ordered to create sophisticated responses to matched rules.
Create a FAM policy and its rules from scratch for Windows and UNIX servers
Set up file activity monitoring by defining and managing policies and rules in the Policy Builder for Files window.
Creating a FAM policy rule from the Investigative Dashboard Entitlements tab
You can use the monitored data, such as datasource names, user names, actions, and file paths, in the Investigation Dashboard Results Table to create policy rules.

Parent topic: Protect