General Pudr Steps; Pudr Process - Fortinet FortiDB User Manual

Fortinet database security system user guide
Table of Contents

Advertisement

Chaining with Parameterized User-Defined Rules

General PUDR Steps

PUDR Process

12
The general step for creating a chain that uses a PUDR are:
1
In UBM, define an Object, User, or Session policy that will be your Source Rule.
2
In UBM, define a PUDR that will be your Target Rule
3
In the Rule Chaining module, define a chain which associates the UBM policy and
the PUDR.
Parameterized User-Defined Rule Flow Diagram
The PUDR process involves these steps.
1
The source rule is violated and an alert is generated.
2
FortiDB MA determines if there is a PUDR that is chained to the source rule.
• If a rule is chained, FortiDB MA fetches the information on the chain
relationship
3
FortiDB MA checks to see if the source rule is to be run immediately or not.
4
FortiDB MA checks to see if the chained rule is a PUDR vs. a regular policy
a
If a regular UDR, FortiDB MA runs the UDR without passing any
variables.
b
If the rule is a PUDR and is set to be run immediately, FortiDB MA
passes the parameters defined in the rule chain to the PUDR.
c
If the rule is a PUDR and is set to be run with the schedule settings of
the source rule, FortiDB MA indicates that parameters have to be
passed for the successful execution of the PUDR.
5
An alert is generated for the PUDR.
Rule Chaining
FortiDB Version 3.2 Utilities User Guide
15-32000-81369-20081219

Advertisement

Table of Contents
loading

Table of Contents