Skip Navigation

Create a policy

You can create a policy and then use that policy on devices. A policy defines how the agent handles malware it encounters. For example, automatically quarantine malware or ignore it if in a specific folder.
This task covers using the create policy Basic view. See JSON view for information on creating a policy using JSON.
  1. In QRadar, select
  2. Select
    Device policies
  3. Click
    Create policy
  4. Enter a name for the policy.
  5. Enter your console user ID.
  6. Select the policy settings. See Policy settings for information about each setting.
  7. Click
    Create policy
    If the Write/Modify permissions were granted (see Application privileges), administrators can add or modify any existing policy. Before granting this permission, ensure that all administrators in your organization understand the risks involved.