close
keyboard_arrow_left
Table of Contents
- play_arrow JSA Risk Manager
- play_arrow JSA Risk Manager configuration
- play_arrow Network Device Management
- play_arrow Network Device Management
- Device Discovery Process
- Discovering Devices in your Network
- Importing Multiple Devices from a CSV File
- Adding a Network Device to JSA Risk Manager
- Deleting a Device from JSA Risk Manager
- Finding Network Devices in the Device List
- Adding Device Information to the Topology
- Collecting Neighbor Data to Update the Topology
- Configuring the Discovery Schedule to Populate Device Information
- play_arrow Device Configuration Backup Jobs
- play_arrow Network Connections Overview
- play_arrow Network Connections Overview
- play_arrow Network Device Configuration and Monitoring
- play_arrow Network Device Configuration and Monitoring
- Searching Device Rules
- Filtering Device Rules by User or Group
- Comparing the Configuration of your Network Devices
- Adding or Deleting a Device in JSA Risk Manager
- Backing up a Device to get its Configuration Data
- Discovering Devices in your Network
- play_arrow Log Source Mapping in JSA
- play_arrow Protocol Configuration for Network Devices
- play_arrow Schedules for Discovery and Backup
- play_arrow Firewall Rule Event Counts of Check Point Devices
- play_arrow Network Topology
- play_arrow Network Topology
- play_arrow CIS Benchmark Scans
- play_arrow Network Simulations in JSA Risk Manager
- play_arrow Network Simulations in JSA Risk Manager
- Simulation Tests
- Creating a Simulation
- Duplicating a Simulation
- Manually Running a Simulation
- play_arrow Network Configuration Change Simulation
- Simulating an Attack on an SSH Protocol
- Viewing Simulation Results
- Approving Simulation Results
- Revoking a Simulation Approval
- Assigning Simulations to Group for Tracking
- play_arrow Topology models
- play_arrow Reports
- play_arrow Audit Log Data
list Table of Contents
Approving Results from Policy Monitor Questions
date_range
09-Aug-21
SUMMARY You can evaluate the results that are returned from a Policy Monitor question in JSA Risk Manager. Approving a result of a question is similar to tuning your system to inform JSA Risk Manager that the asset that is associated with the question result is safe or can be ignored later.
When a user approves an asset result, the Policy Monitor detects that asset result as
approved. Then, when the Policy Monitor question is submitted or monitored in the future, the asset
is not listed in the question results. The approved asset does not display in the results list for
the question unless the approval is revoked. The Policy Monitor records the user, IP address of the
device, reason for approval, the applicable device or rule, and the date and time. Approve results
to Policy Monitor questions that don't represent risk in your network.
- In the results table, select the checkbox next to the results you want to accept.
- Choose one of the following options:
Option Description Approve All Select this option to approve all the results. Approve Selected Select the checkbox next to the results that you want to approve, and then click Approve Selected. - Type the reason for approval.
- Click OK.
- Click OK.
- To view the approved results for the question, click View Approved.
The Approved Question Results window provides the following information:
| Parameter | Description |
|---|---|
| Device/Rule | The device that is associated with this result in Device/Rule Results. |
| IP | The IP address that is associated with the asset in Asset Results. |
| Approved By | The user that approved the results. |
| Approved On | The date and time the results were approved. |
| Notes | Displays the text of the notes that are associated with this result and the reason why the question was approved. |
If you want to remove approvals for any result, select the checkbox for each result for which you want to remove approval and click Revoke Selected. To remove all approvals, click Revoke All.
