Symantec IGA

 View Only
  • 1.  Correlation Rules doesn't able point to exact endpoint

    Posted Aug 26, 2019 09:42 AM
    Edited by bhanu sudheer Aug 26, 2019 10:06 AM
    Hi All,

    Under AD endpoint we manage multiple endpoints like 

    Test1
    Test2
    Test3 

    When we create a correlation Rules we are unable to map directly to exact endpoint under AD like Test3 , is there any possibility to do this scoping  

    Because the new correlation Rule doesn't work for existing endpoint  



  • 2.  RE: Correlation Rules doesn't able point to exact endpoint
    Best Answer

    Broadcom Employee
    Posted Aug 26, 2019 10:28 AM
    Correlation rules apply to an Endpoint Type not a specific Endpoint instance.

    You could set up three different Correlation Rules such as:

    ADS:Endpoint1:AttributeA
    ADS:Endpoint2:AttributeB
    ADS:Endpoint3:AttributeC

    So assuming the rules do not work for the other endpoint instances, the Correlate of each ADS endpoint would start at the top rule, not find any matches and then move on to the next rule.

    If you want to enhance the product to allow for rules to specify an Endpoint instance then please open an Idea in the online communities.