Creating Behavior Analysis Rule Modules
In addition to producing a report as a result of application behavior analysis, the CSA MC server can create a rule module from the reported information. This feature is separately licensed and is not available in the base product. If you have a valid license installed, you will notice a new button at the bottom of the Behavior Analysis Configuration page upon completion of the analysis process: the Import button. (See Figure 11-27.) In addition, you see that all completed analysis jobs in the list display with a status of Policy Ready for Importing, as shown in Figure 11-28.
Figure 11-27. Locating the Import Button
Figure 11-28. Policy Ready for Importing Status
Get Cisco Security Agent now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
