Data Types

Admin Console

The Nullafi Shield Admin Console provides a graphical user interface for configuring policy, viewing status, and examining event data. It is a web application which can be accessed using any web browser. The Admin Console is available after the Shield container is started. Access is governed by the defined container options (see Deployment). In the simplest case, browsing to the container host’s IP address on the mapped NULLAFI_HTTP_PORT will open the Admin Console login screen, and using the NULLAFI_USERNAME and NULLAFI_PASSWORD will allow the administrator to log in.

Policy

The policy engine is at the heart of Nullafi Shield. It does the work of examining the data being accessed, classifying it, and deciding whether it should be passed through to the user. The Policy section of the Admin Console is where rules are created to control the engine’s behavior.

Data Types

In the same way that Applications tell Shield where to look, Data Types define what to look for. For most organizations, Shield’s built-in data type definitions cover all detection requirements. Administrators simply refer to these Data Types when creating policies to enforce.

The Data Types policy page in the Admin Console lists each type of data Shield can identify. Data Types are given both a Type, designed to be machine-readable for any automated processes that consume Shield’s log data, and a friendlier Name, which is easier for people to work with. The items displayed on the Data Type page can be sorted by clicking on each column title. Click on the column title a second time to switch between ascending and descending order.

New Data Type

On rare occasions, a company may need to create their own Data Type definition to match company-specific data to which they would like to control access. To define a new data type, click on the Add New Data Type button in the upper right hand corner. The editing window will slide out from the right. To define a Data Type: 1. Input the Type, Name and (optionally) Description into the text fields 2. For each Definition, compose the regular expression for matching in the required text field, then click on the Add button. - Some applications require special consideration of formatting (e.g. JSON), and so Nullafi Shield offers Advanced Settings which can be associated with the regular expression matching for a Definition. Please contact Nullafi Customer Support for help with complicated data types. 3. Click on Save in the lower right

Edit Data Type

To edit an existing data type, hover your mouse over the type’s row in the Data Type listing, click on the three-dot menu that appears, and choose Edit. The application editing window will slide out from the right. Only customer-created data types can be edited. The Edit option will not appear for Shield’s built-in data types.