Clone Application Rule

[#1]

Clone Application Rule

This topic describes the steps to clone an application rule.

To clone an Application Rule

1. Go to  (CONFIGURE) > Policies.
2. In the policies panel, click Content.
3. In the left panel, click Content Library.
4. The list of application rules is displayed. From the available list of rules, select the rule to be cloned.
5. Click Clone Rule.
6. In the Clone Rule panel, do the following:

   • Enter a unique rule name. If the name of that application rule is same as an existing rule, an error message is displayed.

   • Enter the rule value.

     Note: You can clone existing rules to generate cloned rules with different rule names but with same rule value.

   • Enter the condition for the rule.

   • Select the medium to be applied for the rule.

   • Select the MITRE ATT&CK TACTICS for the rule.

   • Select the MITRE ATT&CK TECHNIQUES for the rule.

   • Enter the description for the rule.

   • Select the session data to be applied for the rule.
   • Select the session options to be applied for the rule.
   • Select a meta value from the Flag session with rule name in meta key drop-down menu. This is a mandatory field.
   • Click Clone to clone the rule.
   • Click Cancel to cancel the operation.

                                                      Previous Page                                                      Next Page