Create Asset Tag Rules - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-04-17
Category
User Guide
Solution
Cloud
Abstract

Define asset tag rules to apply tags automatically to assets that match your rule criteria, including any new assets that are attributed to your organization.

You can define tag rules that apply tags automatically to assets that match your rule criteria, including any new assets that are attributed to your organization. Tag rules can be created for IPv4 addresses and IPv4 ranges, enabling you to define custom IPv4 ranges. Use one of the following formats to identify a range in the rule criteria:

  • x.x.x.*

  • x.x.x.1–x.x.x.2

  • x.x.x.x/24

Rules-based tags use the designation TR.

  1. Navigate to Policies and RulesAsset Tag Rules.

  2. Click + Add New Rule.

  3. Add a unique name for the rule and, optionally, a description.

  4. Define the rule criteria. Assets matching the criteria will be tagged with the rules-based tag.

    The list of matching assets is displayed below the rule criteria.

  5. Select the tags to be applied to the matching assets. Choose from the list of existing tags or Add a new tag by entering a tag name and clicking + Add Tag. You can only use Rules-Based Tags (TR) in tag rules.

  6. Click Submit.