View and manage policy details - Administrator Guide - Cortex Cloud Posture Management - Cortex CLOUD

Cortex Cloud Application Security

Product
Cortex Cloud Posture Management
Cortex Cloud Application Security > Cortex CLOUD
Creation date
2025-01-22
Last date published
2026-05-31
Category
Administrator Guide

Select a policy row in the table to open the policy side card. The side card displays:

  • Policy configuration summary: Name, description, policy type, conditions, scope, triggers, and actions

  • Efficiency metrics: Issues created (total and last seven days), PRs blocked (total and last seven days), CI pipelines blocked (total and last seven days)

  • Editor metadata: Created by, modified by, creation date, and last modified date

View policy-driven issues
  • Select Open Issues under Efficiency from the policy side card to redirect to the All Issues table under the Application Issues module

  • Navigate to the issues table filtered by the policy name

The issues table is filtered by the issues created by the selected policy.Unified Application Security Policies create issues in the consolidated All AppSec Issues table. Navigate to ModulesApplication SecurityIssuesAll.

The All Issues table applies the following default filters:

  • Code Scan Source: Branch (except for the Malware tab)

  • Status ! = resolved

  • Excluded = No

Blocking policy visibility in scan tables

To view how blocking policies surface in scan results, navigate to ModulesApplication SecurityScans. The Pull Request Scans and CI Scans tables display blocking policy information:

Column

Description

Blocking Policies

Names of all policies that triggered a block action on the scan

Blocking Policy IDs

IDs of all policies that triggered a block action on the scan

Surfacing these results enables you to trace which policy blocked a specific PR or CI pipeline and navigate to the policy configuration for review or adjustment.

Manage existing policies
  • Edit a policy: Select the policy row and select Edit from the actions menu. The policy wizard opens in edit mode with the current configuration pre-populated. Out-of-the-box (OOTB) policies have limited editability, only the status (enable/disable) and certain trigger configurations can be modified

  • Enable/Disable a policy: Select the policy row and select Enable or Disable from the actions menu. Disabled policies stop evaluating findings. Enabling a previously disabled policy resumes evaluation during the next scan cycle

  • Duplicate a policy: Select the policy row and select Duplicate from the actions menu. The wizard opens with the source policy configuration pre-populated and a new name. Duplication is available only for policies marked as clonable

  • Delete a policy: Select the policy row and select Delete from the actions menu

    Caution

    Deleting a policy closes all issues created by that policy during the next periodic scan. This action cannot be undone. Consider disabling the policy instead of deleting the policy to preserve issue history.