CloudSOC Protect policy error trying to add a Sequence Detector.

Products

• CASB Securlet SAAS

Issue/Introduction

Protect policies allows numbers in the name

Sequence Incident Detector allows numbers in the name

However in Protect policy an error is generated if you try to link a Sequence Detector which has a number in the name

Example of Detector based names which will cause an error if trying to link them to a Protect Policy:

• Over 500 downloads in one day
• Over 1000 downloads in one day

 

Resolution

Workaround as of 01 Feb 2024:

When creating Sequence Detectors do not use a number in the name - then it will connect to Protect policy as expected

For example

Instead of using this format:

• Over 500 downloads in one day
• Over 1000 downloads in one day

Use this format:

• Over five hundred downloads in one day
• Over one thousand downloads in one day

Then when you add the Sequence Detector inside the Protect Policy it will not create an error.