Hi Everyone! I want to showcase a handful of recommendations for improving the performance of your policies within Privilege Manager. Share in the comments if these tips work for you, and/or if you have other recommendations for your fellow PrivMan users!
- Evaluate if ‘Continue Enforcing Policies’ or ‘Continue Enforcing Policies for Child Processes’ should be enabled.
- Most likely, these should be disabled. Otherwise, you will be processing other policies while an application is already caught by a policy.
- Disabling ‘Skip Policy Analysis at Start-up’
- This can be disabled very selectively; policies will not be enforced in the boot phase which could open systems up to vulnerabilities.
- We highly recommend to not set more than 100 total filters on any given policy.
- If you have >100 filters between applications, inclusions, and exclusions on a policy, processing time can be severely impacted.
Thanks for reading!