topic Re: test policy match cli tool returns nothing. what does that mean? in General Topics

test policy match cli tool returns nothing. what does that mean?

HistoricalSwimming — Fri, 08 Apr 2022 16:04:08 GMT

test policy match cli tool returns nothing. what does that mean?

It should match some policy right ?

Does that mean it matches one of the default policies?

Re: test policy match cli tool returns nothing. what does that mean?

kiwi — Thu, 14 Apr 2022 12:11:58 GMT

Hi @HistoricalSwimming ,

I see the same behavior when I test a policy that I didn't configure explicitly.

Only policies that I've explicitly configured will show up in the test. Possibly because the default rules don't show in the config XML file.

Cheers,

-Kiwi.

Re: test policy match cli tool returns nothing. what does that mean?

BPry — Thu, 14 Apr 2022 15:55:16 GMT

@HistoricalSwimming,

The logic for this feature only looks at entries under the <security/> rulebase (or whatever rulebase you're currently looking at). The default policies actually live in their own rulebase under <default-security-rules/> and are never analyzed by the policy match.

You could probably put in a feature request with your SE if you wanted that feature to be expanded to include the default rules.