Custom PLA

A Custom PLA is a user-defined PLA report that help organizations maintain a proactive patching strategy while ensuring compliance and security are tailored to their specific needs.

Custom PLAs provide:

  • Flexibility: Allows organizations to define patching policies based on their security and compliance needs.
  • Granular Control: Enables selection of patches based on CVE, category, vendor, and severity.
  • Targeted Deployment: Ensures patches are applied only to relevant devices by using specific rules.
  • Optimized Compliance Management: Custom time frames for patch application ensure alignment with internal policies.

Creating custom PLA

To create a new custom PLA, complete these steps:

  1. On the Protection Level Agreement page, click the plus (+) button to create a new custom PLA.
    Custom PLA
  2. The Create Custom PLA wizard appears. Complete the following steps:
    1. Enter a name and description for the PLA.
    2. Specify the target days.
    3. Click Next.
      Create Custom PLA
  3. Define the Fixlets Criteria:
    1. Select an Operating System
    2. Refine Fixlet selection using filters (CVE, category, Name, Severity, and Source).
    3. Preview selected Fixlets to ensure the correct Fixlets are selected.
    4. Click Next.
  4. Define target devices
    1. Filter target devices using rule-based conditions through Filter by Query or Filter by device list.
      1. Filter by Query:
        1. Define device filters by selecting attributes, conditions, and values to determine which devices need to be included.
        2. Review the filtered target devices under Preview of dynamically applicable targeted devices.
      2. Filter by device list:
        1. You can manually enter one or more device names, device IDs, FQDNs, or IP addresses to select as targets.
        2. Click verify device list to review the filtered target devices.
    2. Click Next.
  5. Review the PLA Name, Description, Fixlet Criteria, Devices Criteria and modify if needed before finalizing.
  6. Click Create to create the custom PLA.
  7. A success message is displayed. Click Done.

The custom PLA will be stored on the server and listed on the Protection Level Agreement page. Custom PLAs are not activated by default. Activate the PLA as needed.

Editing Custom PLA

Important: You can edit only custom PLAs. System-defined PLAs cannot be edited.
  1. From the Protection Level Agreement page, click on a custom PLA that you want to edit.
  2. Deactivate custom PLA: If the custom PLA is activate, you must deactivate before making changes.
  3. Click Edit.Edit Custom PLA
  4. Modify PLA Details: You can update description of the PLA, target days, Fixlet selection, and target device selection as needed.
    Note: You cannot rename a custom PLA. To use a different name, create a new custom PLA
  5. Review: Carefully review the Summary, then click Update > Done. The changes will be reflected on the Protection Level Agreement page.
  6. Reactivate PLA: Once edits are complete, reactivate the PLA to enforce the updated PLA.

Deleting Custom PLA

Important: You can delete only custom PLAs. System-defined PLAs cannot be deleted.
  1. From the Protection Level Agreement page, click on a custom PLA that you want to delete.
  2. From the details page on the right side, click Delete.
    CAUTION: The action cannot be undone. All associated data will be permanently deleted.
  3. Click Delete to confirm. The custom PLA will be permanently deleted.