Policy Inheritance With Asset Policies - IBM Proventia Network Enterprise Scanner User Manual

Policy Inheritance with Asset Policies

Introduction
Rules for policy
inheritance
Asset policies in the
Console
Examples of
inheritance
indicators
IBM Proventia Network Enterprise Scanner User Guide, Version 1.3
This topic describes rules of inheritance for asset policies. It also explains where policies
appear in the SiteProtector Console, based on the ways in which you can define them.
The following rules describe policy inheritance for agent policies:
You can define only one Network Locations policy, at the Site level, to be used for all
●
agents and assets in your entire group structure.
A Discovery policy applies to only the group for which you define it.
●
The remaining policies are inheritable. A subgroup inherits a policy from the first
●
group higher than itself in the group structure that has a defined policy.
You work with policies in a Policy tab in the SiteProtector Console. When you select a
group on the left pane, the group's policies appear on the right pane. If you expand the
group, the policies also appear below the group. Figure 20 is an example of asset policies
in the CorporateScanningGroups group:
Figure 20: Example of asset policies in a Policy tab in the SiteProtector system
The following table uses Figure 20 to illustrate the inheritance indicators:
Inheriting From Description
Value
The Assessment, Discovery, Scan Control, and Scan Window policies are
blank
defined at the selected group level—
Inheriting from the The agent is configured to use the Assessment Credentials and Scan
factory defaults Exclusion policies defined at a higher level, but neither policy is defined in
the agent's group structure.
The Network Services policy is defined at the Cancun level.
A_Group_Name
Table 26: Asset policy inheritance indicators

Policy Inheritance with Asset Policies

CorporateScanningGroups
.
79