VMware Cloud Web Security - Policy Publish Event
This alert is capturing events when VMware CWS policies were published. During publish, the VMware Edge Cloud Orchestrator deploys the CWS policies in SASE POPs, making them effective. All new rules will be enforced.…
Description
This alert is capturing events when VMware CWS policies were published. During publish, the VMware Edge Cloud Orchestrator deploys the CWS policies in SASE POPs, making them effective. All new rules will be enforced. Depending on the contents of the policy, this might create an impact on the CWS Data Plane traffic.
Detection logic
Detection requirements
- Log source product
- vmwaresdwan
- Log source service
- cws
MITRE ATT&CK mappings
Not mapped to ATT&CK.
No references are available for this detection.
From the source
- At source
- Open at source
- Upstream identifier
- b26a7d97-6b6e-43ab-870e-eb18460ae602
Licence
- Published under
- MIT LicenseRead the licence
- Attribution
- Required
- Obtained under
- MITRead the origin licence
Authorship
- Published
- Sep 1, 2026
- Version
- 1