FortiDB Version 3.2 Utilities User Guide
12
15-32000-81369-20081219
Chaining with Parameterized User-Defined Rules
Rule Chaining
General PUDR Steps
The general step for creating a chain that uses a PUDR are:
1
In UBM, define an Object, User, or Session policy that will be your Source Rule.
2
In UBM, define a PUDR that will be your Target Rule
3
In the Rule Chaining module, define a chain which associates the UBM policy and
the PUDR.
PUDR Process
Parameterized User-Defined Rule Flow Diagram
The PUDR process involves these steps.
1
The source rule is violated and an alert is generated.
2
FortiDB MA determines if there is a PUDR that is chained to the source rule.
• If a rule is chained, FortiDB MA fetches the information on the chain
relationship
3
FortiDB MA checks to see if the source rule is to be run immediately or not.
4
FortiDB MA checks to see if the chained rule is a PUDR vs. a regular policy
a
If a regular UDR, FortiDB MA runs the UDR without passing any
variables.
b
If the rule is a PUDR and is set to be run immediately, FortiDB MA
passes the parameters defined in the rule chain to the PUDR.
c
If the rule is a PUDR and is set to be run with the schedule settings of
the source rule, FortiDB MA indicates that parameters have to be
passed for the successful execution of the PUDR.
5
An alert is generated for the PUDR.
