Policies¶
Policies are patterns definitions facilitating proactive session monitoring. In case a defined pattern is detected, Fudo Enterprise can automatically take respective actions and notify the administrator about the current situation.
Fudo Enterprise divides policy definition by its basis: AI module or Regular Expression:
- when the
AI module
option is chosen as a basis of the policy, Fudo Enterprise reacts on reaching the specified Threat Probability Threshold, - when the
regular expression
option is chosen for the policy’s base, the system analyses the defined expression’s input or output.
Both types of policies react by taking the following actions:
- sending e-mail message,
- sending SNMP TRAP notification,
- pausing connection,
- terminating connection,
- blocking the user.