Recertification Schedule

There are several rule recertification and expiration parameters that the App Administrator configures in the Rule Lifecycle Management App (RLM) Settings () > Setup menu. These parameters determine, for example, which rules to retrieve, the duration of the recertification, and how often RLM refreshes the status of rules that are in-progress.

In this section, configure the following rule certification parameters:

• Recertification trigger: RLM retrieves rules for recertification with an expiration that matches this value.
• Standard Recertification lifespan: Duration of the standard rule recertification period. For example, set this value to 365 days to renew the certification for another year. By default all rules are assigned the standard recertification lifespan.

• Critical Recertification lifespan: Duration of the critical rule recertification period, which is typically more frequent than the standard recertification lifespan. For example, set this value to 182 days to renew the certification for another 6 months.

  This Recertification Lifespan values must be greater than the value for Recertification Trigger.
• Auto Decertify: Enable the toggle to automatically decertify rules. RLM opens a decertification ticket if all of these criteria are met:
  • Owner response time has expired.
  • Rule is expired.
  • Rule log (on the firewall device) is enabled.
  • Rule last hit (timestamp when traffic was matched to the rule) is none or greater than 365 days.
  • Rule was not modified in the last year.
  • Rule will be disabled only if the Rule Decommission Workflow toggle is enabled.