Schedule analysis

This section describes how to schedule analyses for devices, groups and matricies.

AFA can run multiple reports in parallel, and the maximum number of reports that can be generated simultaneously depends on your AFA system configuration and power. In order to change this value, contact AlgoSec support.

Note: If a manual report process is running on a specific device, the current monitoring cycle for that device is skipped. AFA will attempt to run the next monitoring cycle as scheduled. If a monitoring cycle is already running on a specific device when a manual report is requested, AFA waits for the monitoring process to complete before generating the report.

Note: It is recommended to only run 'All Firewalls' analyses at night, in order to avoid a high strain on your system during normal operating hours.

Schedule Analysis: Watch to learn how to schedule analysis to suit your business needs.

Add and edit analysis jobs

To add or edit an analysis job:

  1. In the toolbar, click your username.

    A drop-down menu appears.

  2. Select Administration.

    The Administration page appears, displaying the Options tab.

  3. Click the Scheduler tab.

    The Scheduler tab appears.

  4. Do one of the following:

    • To schedule a new analysis job, in the Schedule Recurring Analysis area, click New.
    • To edit an existing analysis job, click on the Edit icon next to the desired job.

    New fields appear.

  5. In the Job name field, type a name for the job.

  6. (Optional) To aggregate a group/matrix members' existing reports into a group/matrix report, (instead of generating new reports for each member and using those reports to generate a group/matrix report), select the Base group reports on existing device reports check box.

    This field is relevant only when generating group reports and matrix reports.

  7. To select a risk profile, select the Select risk profile check box, and select a risk profile from the drop-down menu.

  8. Select one of the following settings in the Run device analysis drop-down menu:

    • Only if the policy/topology changed - if a policy is detected as unchanged during a scheduled analysis, then AFA should not run a full report, but instead create an unchanged report that links to the last report for the policy.
    • Always (slow) - AFA will always run a full analysis, regardless of whether the policy has changed or not.

    Note: Selecting this option will result in longer analysis time and requires more disk space.

  9. Specify the device, group, or matrix for which you want to schedule an automatic analysis, by doing the following in the Select a device/group area:

  10. Click Select device/group.

    A tree of all the devices, groups, and matrices appears.

  11. Choose the desired device, group, or matrix.

    Note: When you select a "parent" tier device, all the devices beneath it are automatically analyzed with each analysis. For more details, see View AFA device data.

  12. Click OK.

  13. In the Recurrence area, specify how often the analysis job should run.

    You can select either a daily, weekly, monthly, quarterly, or yearly analysis, or configure the analysis to occur when a policy is installed on the device(s).

    Note: You can only select Upon policy install, if real-time change monitoring is enabled for this device.

    The fields in the Recurrence Pattern area change according to your selection.

  14. In the Recurrence Pattern area, configure the desired pattern of recurrence.

    Note: If you want to see the scheduled job run during the current schedule cycle, schedule your analysis at least five minutes later than the current time.

  15. Click OK.

Back to top

Delete scheduled jobs

Use this procedure to delete a scheduled analysis or dashboard email.

Do the following:

  1. In the toolbar, click your username.

    A drop-down menu appears.

  2. Select Administration.

    The Administration page appears, displaying the Options tab.

  3. Click the Scheduler tab.

    The Scheduler Setup tab is appears with a list of scheduled analysis and dashboard e-mail jobs.

  4. Select the check box next to the desired job.

  5. Click Delete.

    A confirmation message appears.

  6. Click Yes.

The job is deleted.

Back to top