Forcepoint™ Security Management Center Service Online Documentation

Home
Policy Creation and Administration
Policy Supporting Elements

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
- Overview
  Policies are key elements that contain rules for allowing or blocking network traffic and inspecting the content of traffic.
- Creating and managing policy elements
  Policy elements are containers for the rules that determine how Engines, Master Engines, and Virtual Engines examine traffic. The policy elements for the Engines include Template Policies, Policies, and Sub-Policies.
- Rule Types within Policies
- Policy Supporting Elements
  - Defining IP addresses
    When you define IP addresses as elements, you can use the same definitions in multiple configurations for multiple components.
  - Working with Service elements
    Service elements match traffic based on protocol or port and set options for advanced inspection of traffic. Service elements are used in Engine Policies, and Layer 2 Interface Policies.
  - Defining Situation elements
    Situation elements contain the context information that defines the pattern that the Engine looks for in the inspected traffic. Situation elements also define the patterns that match events in the traffic.
  - Using Network Application elements
    Network Application elements collect combinations of identified characteristics and detected events in traffic to dynamically identify traffic related to the use of a particular network application.
  - Defining User Response elements
    With the User Response element, you can send customized replies to users, instead of just closing an HTTP or HTTPS connection.
  - Predefined Aliases
    Predefined Aliases are used in the default policies. Some of them might be useful when you create your own rules.
- Inspection & Content Filtering Policies
- Access Control & Authentication Policies
- Policy Troubleshooting & Maintenance
Monitoring
VPN

Policy Supporting Elements

Defining IP addresses
When you define IP addresses as elements, you can use the same definitions in multiple configurations for multiple components.
Working with Service elements
Service elements match traffic based on protocol or port and set options for advanced inspection of traffic. Service elements are used in Engine Policies, and Layer 2 Interface Policies.
Defining Situation elements
Situation elements contain the context information that defines the pattern that the Engine looks for in the inspected traffic. Situation elements also define the patterns that match events in the traffic.
Using Network Application elements
Network Application elements collect combinations of identified characteristics and detected events in traffic to dynamically identify traffic related to the use of a particular network application.
Defining User Response elements
With the User Response element, you can send customized replies to users, instead of just closing an HTTP or HTTPS connection.
Predefined Aliases
Predefined Aliases are used in the default policies. Some of them might be useful when you create your own rules.