Policies

Policies are patterns definitions facilitating proactive session monitoring and control. In case a defined pattern is detected or specific conditions are met, Fudo Enterprise can automatically take respective actions and notify the administrator about the current situation.

Fudo Enterprise supports multiple policy types:

• Regular Expression - Triggers when defined patterns are detected in session input or output

• AI Behavioral Analysis - Reacts when the Threat Probability threshold is reached based on behavioral analysis

• AI Session Summary - Triggers actions when risk thresholds are detected in AI-generated session summaries

• Sudo - Controls and authorizes sudo commands executed during SSH sessions

Note

Policies can trigger various actions depending on their type:

• sending e-mail message,

• sending push notifications to Fudo Officer,

• sending SNMP TRAP notification,

• pausing connection,

• terminating connection,

• blocking the user,

• allowing sudo commands matching created regular expressions (Sudo policies).

• Regular Expression-Based Policy
• Ai Module-Based Policy
• Ai Module-Based Policy Examples
• AI Session Summary Policy
  • Policy Configuration
  • How It Works
• Sudo Command Control Policy
  • How Sudo Command Control Works
  • Setting up Fudo for Sudo Control
  • Sudo Policy Configuration
  • Sudo Plugin Installation