Network Policies

Network Policies are sets of network rules that can be applied to applications/roles. Network Policies specify the IP addresses and ports with which roles can communicate, leveraging host-based firewall orchestration to ensure that their configured rules are applied even when the Fortress appliance is down or cannot communicate with agents. These network rules are generated based on an application’s available Trust Profile.

To create network policies, Fortress uses the Trust Profile details and creates classifier groups of IP Addresses and Ports with which the roles can communicate.

The INCOMING section specifies the IP addresses and ports from which incoming traffic is allowed.

The OUTGOING section specifies the IP addresses and ports to which outgoing traffic is allowed.

Deployed Version displays the network policy version that is currently deployed, and Viewing Version displays the network policy version that is currently displayed on the screen.

at the application level a user can only compile.
they can not see rules or evaluate

Actions at trust profile level

Status and progress should just be Status. status will show a progress bar and when done a finished or something
-don’t need action title just put the icons next to the progress bar

Should have info after compile to let the user know they are compiling all their server roles. if they want to do them individually, you will need to select your specific server role

COMPILED

CUSTOM - does this mean when a user edits a compiled rule?
if so is this not working when i filter on custom?
there should be a CUSTOM (edited) - different from custom which is created in eval

MERGE - user can not merge these here so it is slightly confusing, but this means the user merged the rules together in alerts.

Actions at “Rules” level and actions at the Rule level - sort that out
metric was not compiled show this differently and dim the State drop down
Save shouldn’t always be on

Better way to show the difference between draft and deployed so it is very clear - a visual here? colored icon in the drop down perhaps?

Actions at Rules level (global)

  • Save
  • Add Rule
  • Deploy
  • Import Trust Profile
  • Export Trust Profile
  • i’m not sure i understand the include exclude function

Actions per Rule

  • Edit
  • Delete

Double click on a row it brings you to Edit ADP
This is actually editing the metrics rule.

globally:
Delete
Import Trust Profile
Export Trust Profile
Include/Exclude
Save
Deployed
per row:
Add Rule
Edit Rule
Delete Rule