Hey everyone, I've been tasked with helping our security team implement some new controls for our PCI-DSS audit, and we're evaluating Absolute Secure Access. I came across your "Claw" feature and the mention of custom policy templates for PCI-DSS environments.
I'm really curious—could someone walk me through a specific example? I've read the docs on the general structure, but I learn best by seeing actual code. For instance, if we wanted to enforce a policy that only allows connections from pre-registered corporate devices to our cardholder data environment, what would that look like?
I'm imagining it involves the condition and action blocks in the policy JSON, but the details escape me. Something like this maybe?
```json
{
"policy_name": "PCI_Device_Compliance",
"condition": {
"allOf": [
{ "field": "device.registered", "operator": "equals", "value": true },
{ "field": "app.tag", "operator": "contains", "value": "pci-zone" }
]
},
"action": {
"type": "allow_access"
}
}
```
Is that on the right track? Also, how do you handle the logging for such a policy to satisfy the audit trail requirements? Does Claw automatically generate logs that can be tied to a specific user session and device fingerprint?
My team uses a mix of Tableau and Power BI for reporting—are there any easy ways to pipe these policy logs into those tools for compliance dashboards, or is it mostly via SIEM integration? Any gotchas you've run into while setting these up would be super helpful to know.