XYGATE Compliance PRO (XSW) Reference Manual

X XYGATE
®
Compliance PRO
™
Reference Manual
Chapter 7. System Policy Analyzer
XYPRO Technology Corporation 144 Proprietary and Confidential
7.5.4 Items Resolved by Subsequent Collections
As each collection is applied to the rule, policy items will be resolved because the
offending issue gets changed or the item is removed from the system. These items will
migrate from the Failed or Exclusions tab to the Resolved tab. These will always be
visible immediately after the resolving collection. The disposition, however, is
dependent upon the user’s preferences (see item 8 on page 45).
Note: If your user preference is set to Delete, then resolved items are cycled
permanently from the policy after the initial resolution cycle. If your preference is
Keep, then resolved items are maintained in the policy and if they are re-located
in a subsequent collection, the item is then re-instated to the last state—either
failed or excluded. By keeping resolved items, failures to the policy that
reappear can be tracked over time.
7.5.5 Attaching Notes to Your Security Policy Items
You can add custom notes to Security Policy items that appear in the log entries. To
add a note, select the appropriate rows and click Notes.
Type in the annotation you wish to include with these entries in the Log Text Field, and
click Add. Your text along with a timestamp will be added to the Log. The notes you
add can be viewed by selecting the desired row and clicking View Log.
7.6 Applying Collections to a System Policy
When you create a System Policy, it is based upon a specific node and collection,
such as \NODE Full Collection. This collection criterion contains a specific set of
collectible resources. To maintain consistency, each System Policy is associated with
the collection resources.
7.6.1 Automatically Applying a New Dataset to the Policy
When you generate a policy based on a query, the name of the collection used as the
original base of the query and policy is retained. From then on, every time a new
dataset is loaded for that collection, the xswLoader will update the policy automatically,
without any manual intervention.
If items in the policy are absent in the collection, the item is classified as resolved.
If the item is located but is excluded, it remains excluded.
If items that are excluded are absent in the collection, the item is classified as
resolved. All items that have a new status will also be displayed on the Recent tab.