
Introduction
Altostrat supports various policy types:- Security Essentials: Block malicious IPs, intrusions, or suspicious traffic
- Content Filtering: Restrict websites and categories (e.g., adult content, streaming)
- Control Plane: Manage inbound access (WinBox, SSH, API) and Firewall input rules at scale
- Notification Policies: Decide who receives alerts and under which conditions
Creating a New Policy
1
Open the Policies Page
Navigate to Policies from your Altostrat Dashboard. You’ll see different types (e.g., Security Essentials, Content Filtering, Control Plane).
2
Select or Add a Policy Type
Choose the category (e.g., Security Essentials) or click Add if you’re creating a new policy instance for that category.
3
Configure Settings
Depending on the policy type:
- Security Essentials: Enable specific block lists
- Content Filtering: Configure site categories and SafeSearch toggles
- Control Plane: Define input Firewall rules, IP services, and trusted IPs
4
Save and Apply
After naming and configuring your policy, click Save. Then navigate to the relevant Site page to assign the policy if needed.
Editing an Existing Policy
1
Locate Your Policy
Under Policies, click on the relevant category (e.g., Content Filtering).
2
Adjust Settings
Toggle categories, add or remove block lists, or update inbound Firewall rules, depending on the policy type.
3
Save
All changes will automatically propagate to assigned sites after a brief delay.
Removing a Policy
Deleting a policy removes its configuration from any site currently using it. Those sites will revert to having no policy or a default policy if one is set.
1
Select the Policy
Under Policies, find the policy you want to remove.
2
Delete or Reassign
Click the Trash or Remove icon and confirm the action. If the policy is critical, consider assigning a different one to your sites first.
Best Practices
- Minimal Overlap: Avoid assigning multiple policies with conflicting rules to the same site
- Versioning: If you need major changes, consider creating a new policy rather than drastically editing an existing one
- Audit Regularly: Check which policies are active and ensure they still match business requirements
- Combine: Use Security Essentials plus Content Filtering or Control Plane for layered defense