Configuring an option group, Compiling a policy, Configuring an option group compiling a policy – Symantec Critical System User Manual

Page 116

Advertising
background image

116 Migrating to the latest version

Migrating legacy detection policy files

6

For rules that need to be changed, on the Rules tab, right-click the rule and
then select the correct conversion menu item.

7

Verify that all other criteria, actions, and values are correctly set for your
rules.

8

Click Tools > Validate.
If an error prompt appears, troubleshoot the error.

Configuring an option group

By configuring an option group for your policy, you can view your migrated
rules when you display the policy in the management console. When you view
the rules in the management console, you can also enable and disable the rules.
If you do not configure an option group for your converted policy, you cannot
view your migrated rules when you display the policy in the management
console. Also, the migrated rules retain their original, pre-migrated enabled or
disabled value. Configuring option groups is optional.

To use option groups, you must remove all spaces in rule names because you
must type your rule using the format

RuleSetName.RuleName

with no spaces.

You should also validate your policies after configuring option groups.

See the Symantec Critical System Protection Policy Authoring Guide for details on
how to configure an option group for detection policies.

Compiling a policy

Once you verify that your rules are properly migrated, you are ready to compile
your policy.

To compile a policy

1

On the Library tab, select your new policy, and then click the Compile icon.

2

Expand the folder that contains your policy.
The red policy icon indicates a compiled policy.

Advertising