Create a Xray Policy

Next, we will create an Xray security policy that sets the types of security violations to alert on.

  1. Go to Administration ► Xray ► Watches & Policies ► Policies.

Xray Policies

  1. Click on Create a Policy.

  2. Give the policy a name like default-security and a description.

Security Policy Name

  1. Click on New Rule at the right.

  2. Give the rule a name like high-security-rule.

  3. For Minimal Severity, specify High.

Xray Policy Rule

  1. Click Save for the new rule.

  2. Click Create to create the new policy.

Policies define security and license compliance behavior specifications. Policies enable you to create a set of rules, in which each rule defines a license/security criteria, with a corresponding set of automatic actions according to your needs. Policies are enforced when applying them to Watches. A policy is contextless, which means that it only defines what to enforce and not what to enforce it on.