Managing Emergency Policies

Scenarios

This topic describes how to manage emergency policies, including Viewing an Emergency Policy and Deleting an Emergency Policy.

Viewing an Emergency Policy

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 1 Workspace management page
   

4. In the navigation pane on the left, choose Risk Prevention > Security Policy. On the displayed page, select the Emergency Policies tab to go to the emergency policy management page.
   Figure 2 Emergency Policies
   

5. On the Policy View tab displayed by default, view the statistics of emergency policies that have been successfully delivered.
   Figure 3 Viewing Emergency Policies
   
   • Policy Expiration Distribution: displays the proportion of automatically expired policies in a pie chart and collects statistics on the number of auto expiration policies and non-auto expiration policies.
   • Policy Distribution: displays the number of Block and Allow policies of each defense layer in a bar chart. For details about the defense layer types supported by emergency policies, see Limitations and Constraints.
   • Top 5 Regions with Most Block Policies: displays the five regions with most policy objects in a bar chart.
   • Emergency policy list: displays basic information about emergency policies in a list. Parameters in the policy list are described as follows:

     Table 1 Parameters in the emergency policy list

     Parameter	Description
     Policy Object	Policy Object. A policy object is displayed in a separate row. If Object Type is set to IP, an IP address is displayed. If Object Type is set to Domain name, a domain name is displayed. If Object Type is set to Account, the cloud service account (IAM username) is displayed.
     Policy Type	Policy Type. The value can be Block or Allow. Block: The access from the policy object will be denied. Allow: The access from the policy object will be allowed.
     Object Type	Object type of the policy. If Policy Type is set to Block, Object Type can be set to IP, Account, or Domain name. If Policy Type is set to Allow, Object Type can be set to IP or Domain name.
     Defense Layer Type	Defense line type of the policy. Emergency policies support CFW, WAF, VPC, and IAM.
     Region	Region of operation connections configured in the policy.
     Tag	Tag of the policy.
     Created By	Creator of the policy.
     Auto Expiration	How long the policy will expire automatically.
     Expiration Date	Time the policy expires automatically.
     Description	Policy description. This parameter is hidden by default. Click on the right of the search box above the emergency policy list to set the emergency policy list as follows: Basic Settings: Table Text Wrapping: If you enable this function, excess text will move down to the next line; otherwise, the text will be truncated. Operation Column: If you enable this function, the Operation column is always fixed at the rightmost position of the table. Custom Columns: Columns you want to display in the emergency policy list. If you select before a column name, the column will be displayed on the table. If you deselect before a column name, the column will not be displayed on the table.
     Created	Time the policy was created.
     Operation	You can delete a policy. For details, see Deleting an Emergency Policy.

     Click before a policy object to expand the list of all operation connections related to the policy object. Click View History in the Operation column of the operation connection list to view the historical records of the operation connection.

6. Click the Task View tab on the Emergency Policies page and view the statistics of emergency policy tasks. Tasks are generated when emergency policies are added or deleted.
   Figure 4 Viewing an emergency policy task
   
   The Task View page displays the following information:

   • Delivered Policies: This chart displays the number of succeeded and failed emergency policy tasks by defense layer type. For details about the defense layer types supported by emergency policies, see Limitations and Constraints.
   • Delivered Policies by Region: This chart displays the number of succeeded and failed emergency policy tasks by region.
   • Delivered Policies by Enterprise Project: This chart displays the number of succeeded and failed emergency policy tasks by enterprise project.
   • Task list: displays basic information about emergency policy tasks. The parameters in the task list are as follows:

     Table 2 Parameters in the emergency policy task list

     Parameter	Description
     Task Name	The task name, which is automatically generated by the system when the task is generated.
     Task ID	The task ID, which is automatically generated by the system when the task is generated.
     Policy Type	The policy type of an emergency policy task. The value can be Block or Allow. Block: The access from the policy object will be denied. Allow: The access from the policy object will be allowed.
     Object Type	Object type of the emergency policy task. The value can be IP, Account, or Domain name.
     Creator	Creator of the policy.
     Status	The status of the task. Executing task: the progress of the task. Succeeded: the number of policy objects that are successfully executed in the task. Failed: the number of policy objects that failed to be executed in the task.
     Created	Time the emergency policy task was created.
     Operation	You can retry an emergency policy task. This operation can be performed when some or all policy objects in the emergency policy task fail to be delivered. To retry a failed task, click Retry in the Operation column of the task. To retry a batch of failed tasks, select them all and click Retry above the task list.

Deleting an Emergency Policy

1. Log in to the SecMaster console.
2. Click in the upper left corner of the management console and select a region or project.
3. In the navigation pane on the left, choose Workspaces > Management. In the workspace list, click the name of the target workspace.
   Figure 5 Workspace management page
   

4. In the navigation pane on the left, choose Risk Prevention > Security Policy. On the displayed page, select the Emergency Policies tab to go to the emergency policy management page.
   Figure 6 Emergency Policies
   

5. On the Policy View tab under Emergency Policies, locate the row that contains the policy you want to delete and click Delete in the Operation column.

   To delete multiple policies, select the target policies and click Batch Delete above the list.

6. In the displayed confirmation dialog box, click Confirm. After the operation is complete, check whether the policy has been deleted by referring to Viewing an Emergency Policy. If no information about the deleted policy is displayed on the page, the policy has been deleted successfully.