Auto-Remediation enables you to create rules for Cynet 360 to automatically perform remediation actions when an alert is generated. These rules can be configured to match alerts based on a number of factors. There are two ways to create Auto-Remediation rules:From a specific alert, in the Alerts page.Cynet 360 automatically populates the rule parameters according to the selected alert.From the Actions page, Auto Remediation tab. Creating an Auto-Remediation rule includes several steps:Configuring general parametersMatching the rule to alerts and scan groupsAdvanced matching optionsMatching the rule to specific hostsSelecting a remediation actionOnce you create an Auto-Remediation rule, you can configure additional advanced settings. To edit or delete an auto-remediation rule, navigate to Actions > Auto Remediation.Configuring general parametersEnter the following general parameters:ParameterDescriptionRule nameA name for the ruleDescriptionA description for the rulePriorityA number from 1 to 1000, as per the firewall used by the system, to identify which rule to execute when two auto-remediation rules match an alert. The lower the number, the higher the priority.Matching the Rule to Alerts and Scan GroupsYou can create an auto-remediation rule to be applied on specific host groups. The fields required for matching an auto-remediation rule to host groups are:ParameterDescriptionAlert NameEnter a regular expression (RegExp) to match the name of the alert. This enables matching of multiple alerts with individual names according to a pattern. To match all alert names, use the regular expression (.*)Scan GroupsThe default option is All Host Groups. To select specific scan groups on which Cynet 360 must perform auto-remediation, clear the All Hosts check box and select scan groups from the dropdown list.Alert SeveritySelect the severity level of alerts that Cynet 360 must auto-remediate. Advanced Matching OptionsAdvanced options for matching an auto-remediation rule to an alert are based on files, users, or networks. To match the rule to any file/user/network in an alert, leave these fields blank.ParameterDescriptionFileEnter a specific File Hash or File NameUserEnter a specific UsernameNetworkEnter a specific IP address, Domain, or URLMatching the Rule to Specific HostsYou can create Host Groups and configure the auto-remediation rule to apply only to alerts triggered on those hosts. To create a Host Group:Expand the Hosts to Match section and click Add New Match.Enter a group name.Enter a regular expression (RegExp) to match the names of the hosts you want to include in the group.To apply the rule to specific operating systems in the host group, select an operating system from the dropdown list. The list is populated according to the scanned hosts.Click Save Group.To edit a Host Group, select it from the list, then click Edit Match. Selecting a Remediation ActionThe available remediation actions depend on the type of alert you want to remediate: File, user, host, or network. The remediation actions include built-in remediation actions, custom remediation actions, and playbooks.Select an alert type, then a remediation action. To save the auto-remediation rule, click Save.Advanced Auto-Remediation SettingsAdvanced auto-remediation settings include:Remediation Retry Attempts: Set the maximum number of times the system attempts a remediation action. The default is 48 retries. Remediation Retry Interval:  Set the time interval between remediation retries in minutes. The default is 30 minutes.To change these settings navigate to Settings > Advanced > Remediation Settings.