Enable IPT rule recommendations

The Policy Optimization page's Intelligent Policy Tuner (IPT) provides recommendations for replacing permissive rules with new, tighter rules. However, generating these recommendations may take a while, increasing the time to generate the report. If you want, you can disable this feature using the following procedure.

Note: To determine the amount of time it takes to generate rule replacement recommendations, view the AFA log in /home/afa/.fa-history. The start of the task is marked "IPT recommendations generation - Starting", and the end of the task is marked "IPT recommendations generation - Finished".

Do the following:

  1. In the toolbar, click your username.

    A drop-down menu appears.

  2. Select Administration.

    The Administration page appears, displaying the Options tab.

  3. Click the Advanced Configuration tab.

    The Advanced Configuration page appears.

  4. Click Add.

    The Add New Configuration Parameter dialog is displayed.

  5. In the Name field, type Disable_IPT_Recommendations.

  6. In the Value field, type one of the following:

    • Type yes to disable IPT rule replacement recommendations.
    • Type no to enable IPT rule replacement recommendations.

  7. Click OK.

  8. Click OK.