General Tab
The General tab is for editing the basic attributes of the policy.
Policy Status
It indicates whether the policy is enabled. Click the toggle button at the top to enable or disable the policy. On the Policies Interface, a green dot represents an enabled policy and a gray dot represents a disabled policy.
Name
The name should be unique and descriptive. The list on the Policies Interface displays this name for a policy. You can filter event data by policy, so a descriptive name can be very useful to users of the Netwrix Threat Manager Reporting Module.
Description
The description is optional but recommended. Since you can configure each policy to be as broad or narrow as you need, the name combined with the description should clearly explain what objects and events it monitors/blocks, where in the network it looks, and when it is active. The list on the Policies Interface displays this description for a policy.
Save all changes you make to a policy or a template before leaving the configuration interface.
History
Threat Prevention automatically populates the History details in the center of the General tab on creation or modification.
It contains read-only information on who created the policy (Added by), when they created it (Added on), who made the latest modification (Modified by), and when the latest modification occurred (Modified on).
Schedule
The schedule is for setting the time period for an enabled policy to monitor or block events.
| Icon | Label | Represents |
|---|---|---|
 | Always Active | Indicates the policy is active at all times when enabled. This is the default setting |
 | Active at Specified Times | Indicates the policy is active only at the specified times when enabled. There are two options for setting the specified times:
|
Any new policy created from a template automatically applies the template’s setting, which you can then modify. The list on the Policies Interface displays schedule details for a policy. A clock icon represents Active at Specified Times, and no icon (or blank) represents Always Active.
Weekly Calendar
Set the schedule in the weekly calendar at the bottom of the schedule section.
When you set the schedule to Always Active, the weekly calendar is grayed-out.
When you set the schedule to Active at Specified Times, the weekly calendar is enabled. Each block of time on the calendar represents a 30-minute period.
- Blue blocks – Active times for the enabled policy
- White blocks– Inactive times for the enabled policy
You can set or modify the schedule in one of the following ways:
- Click an individual time-block to toggle between active and inactive for a single 30-minute period.
- Click a time-block in the All row to toggle between active and inactive for an entire column (for all days of the week).
- Click the name of a day to toggle between active and inactive for an entire row (for a full day).