VA Policy Management

VA Policy Management allows you to manage VA pre-defined policies and user-defined policies.

Pre-Defined Policies	Fortinet adaptation of a Best Practice policy in database security. In addition to numerous database-vulnerability policies, Fortinet also provides policies that help you perform operating-system (OS) level assessments such as making sure that your OS version is appropriate for the version of your target database.
User-Defined Policies	Customer-, or third-party-, adaptation of an industry-, or company-, specific security policy. UDPs are constructed with conventional or procedural SQL.

This topic explains:

About VA Policies
VA policies are best practice business rules that are applied during assessments. FortiDB is pre-populated with hundreds of policies for security and compliance to address security standards.
VA Pre-Defined Policies (PDP)
VA User-Defined Policies (UDP)
VA Policy Groups
Data Discovery Policies and Policy Groups
Data Discovery Policy is used by Sensitive Data Discovery and allows searching database for sensitive information located in tables/columns.