Create a Security Engine policy

You must create a policy for the Security Engine and install the policy on the Security Engine after you have installed it. Each policy is based on a template policy. Use one of the following template policies:

  • The default Firewall Template or Firewall Inspection Template policy.
  • A customized template policy, if necessary. Rules inherited from the default template policies cannot be edited directly, so create a copy of a default template policy and customize the copy.

In addition to the rules in the template policy, the default template policies use Automatic rules. Automatic rules are created for the necessary traffic to and from theSecurity Engine, including the management communications between the SMC and the Security Engine. Automatic rules are created only if the installed policy contains the Automatic Rules Insert Point. The default template policies contain the insert point. If you use a customized template policy, include the Automatic Rules Insert Point to use Automatic rules.

Automatic rules are not shown in the rule tables of the policy. You can view a summary of the Automatic rules and change their settings in the Engine Editor.

Steps

  1. Select the template policy for the Security Engine policy.
    1. To use a default template policy, select the Firewall Template or the Firewall Inspection Template policy.
    2. If necessary, create a customized template policy. Open a default template policy for editing, save it as a new template policy, then add the rules that you need. To use Automatic rules, include the Automatic Rules Insert Point in the customized template policy.
  2. In the SMC Client, create a policy for the Security Engine that uses the template policy.
  3. Add the Access rules that are required according to the security policy of your organization, then save the policy.

    For more information, see the Automatic rules and how they work, the Configure settings for Automatic rules, and the Creating and managing policy elements topics in the Forcepoint Network Security Platform Product Guide.