topic Re: Aperture working/basic, how aperture policy works in General Topics

Aperture working/basic, how aperture policy works

RamBalaji — Thu, 27 Dec 2018 06:06:44 GMT

I started with aperture and document mentioned "Aperture compares your user defined aperture policies to the data content and context to calculatre any policy violations"

I understood

Conext = data exposure

Content = Data patterns inside the acutal file

As palo alto stores only meta-data, how the policy is checked. Whether policies are sent to the customer SaaS application and scanned OR data pull/passed through apeture application and then scanned.

I am a firewall guy, my understanding is when traffic passes through the device we apply the policy. In this case its different, please share your knowledge, I couldn't understand what is "compare" with what..!!

thanks

Re: Aperture working/basic, how aperture policy works

BPry — Thu, 27 Dec 2018 17:27:05 GMT

@RamBalaji,

The majority of integrations are performed by creating an account which can actively monitor user activity and actually view the file in question. So for example if you integrate with Dropbox you'll create an account for Aperature that has administrative priveleges, which allows Aperature to identify data in the actual file itself.

While Aperature only stores the meta-data, it has access to the full file while it is scanning the document. It then monitors these files and the activity rules to determine if it violates any of your policies.

I highly recommend fully reading the Admin guide or reaching out to your SE to get a better understanding of how Aperature functions.