Policy Generation Config object
|
Attribute |
Type |
Description |
|---|---|---|
|
carry_over_policies |
boolean |
Any policy marked as approved will be maintained, if possible |
|
deep_policy_generation |
boolean |
creates policies for the whole scope tree under give scope, includes all the members in the give scope |
|
skip_clustering |
boolean |
set to true to skip clustering, will generate policies with existing approved clusters and scopes |
|
auto_accept_policy_connectors |
boolean |
auto accepts all outgoing policy connectors |
|
enable_exclusion_filter |
boolean |
apply exclusion filters to input flow data |
|
enable_default_exclusion_filter |
boolean |
apply default exclusion filters to input flow data |
|
remove_redundant_policies |
boolean |
remove redundant policies during deep policy generation |
|
enable_service_discovery |
boolean |
setting false skips policy generation based on ephemeral port range in adm pipeline reported by the sensor, currently used for generating policies for Windows Active Directory. |
|
externals |
array |
ordered list of external dependency objects |
|
clustering_granularity |
string |
one of VERY_COARSE, COARSE, MEDIUM, FINE, VERY_FINE |
|
policy_compression |
string |
one of DISABLED, CONSERVATIVE, MODERATE, AGGRESSIVE, VERY_AGGRESSIVE |
|
port_generalization |
string |
one of DISABLED, CONSERVATIVE, MODERATE, AGGRESSIVE, VERY_AGGRESSIVE |
|
sim_policy |
integer |
1 => flows, 2 => processes, 5 => both |
The External Dependency object
|
Name |
Type |
Description |
|---|---|---|
|
id |
string |
id of the filter |
|
filter_type |
string |
AppScope or UserInventoryFilter |
|
incluce |
array |
object with user_filters boolean to enable and user_filter_list for the ordered list of provided service inventory filters |