Skip to main content

Configuring monitoring policies

To manage security for your devices in Datto RMM, you execute Bitdefender components through monitoring policies and jobs. A monitoring policy configured at the site level executes Bitdefendercomponents to verify installation and update status, and deploy the security agent. For example, through a monitoring policy, you can raise a critical alert if a device is not protected and configure a response action to deploy the security agent.

Important

To make the Bitdefender components available to your actions, you need to add them to your favorite list. 

Navigate to Components > All Components and click the star icon next to the following Bitdefender components:

  • Bitdefender GravityZone - Device Monitor

  • Bitdefender GravityZone - Endpoint Management [Datto Companion APP]

Creating a policy in the old UI

Notice

Due to a Datto RMM limitation for the new user interface (UI), components do not run correctly when used for both jobs and monitor responses on the same device. 

In order to create a policy, we recommend using the Datto RMM Legacy UI. Your Datto RMM account requires administrator rights to create policies.

To create a policy for your site:

  1. In the Datto RMM Web Portal, click Sites to open the drop-down list.

  2. Select a site and go to the Policies tab.

  3. Click New site policy. The New Policy window appears.

  4. Configure the following elements:

    • Name: Enter a name for your policy

    • Type: Monitoring

    • Based on: new policy 

    The New Monitoring Policy window appears.

    datto_monitoring_policies_p_300469_en.png

To add targets:

  1. Click Add a target.

  2. Select a target type from the drop-down list.

    For information about target types, refer to Filters and Groups in Datto documentation.

  3. Choose your filters and groups.

    For example, by selecting the Default Device Filter you can choose All Windows Desktops from the drop-down list.

  4. Click Add to save the targets to the monitoring policy.

    Notice

    To add multiple targets, repeat the steps.

    datto_add_target_p_300469_en.png

To add monitors:

  1. Click Add a monitor.

    In the Monitor Type section, select Component Monitor, click Next and choose  BitdefenderGravityZone - Device Monitor from the right-side list.

  2. Configure the Monitor Details section as follows:

    1. Choose an action from the drop-down list and execution intervals:

      • Verify Install to check for security agent deployment. Select 30 minutes as best practice.

      • Verify Update to check for update status. Select 3 hours as best practice.

      • Verify Full Scan to check when the security agent has executed a full scan on the target last time. Select 24 hours as best practice.

      • Verify Quick Scan to check when the security agent has executed a quick scan on the target last time. Select 8 hours as best practice.

      Warning

      Make sure you set a correct execution interval to avoid errors.

    2. Under Alert Details, choose an alert priority type.

      Set a time interval for Auto-Resolution. Select After 10 minutes as best practice (no less than 5 minutes).

      Warning

      Make sure you set a correct execution interval to avoid errors.

      datto_add_monitor_old_p_300469_en.png

  3. Configure the Response Details section as follows:

    1. Select Run the following component and select  Bitdefender GravityZone - Endpoint Management [Datto Companion APP].

    2. Choose an action from the drop-down list:

      • Install BEST to deploy the security agent.

      • Update BEST to update security agent.

      • Start Full Scan to begin a full scan task on the selected targets.

      • Start Quick Scan to begin a quick task on the selected targets.

      Notice

      Make sure to match the component action to the monitor action from step 3. For example, Verify Install with Install BEST or Verify Quick Scan with Start Quick Scan.

  4. Configure email recipients to send out notifications when the alert is raised.

    datto_add_monitor_management_old_p_300469_en.png

  5. Under Ticket Details, configure the New Ticket details if the alert should generate a ticket.

    For more information, refer to Alerts and tickets in Datto documentation.

    To view alerts generated by monitors, refer to Manage monitors in Datto documentation.

  6. To apply the policy immediately, click the Save and Push Changes button. 

    To only save the policy, click the Save Only button.

    datto_save_policy_oldUI_p_300469_en.png

Creating a policy in the new UI

To create a policy for your site in the new UI:

  1. In the Web Portal, go to Policies > Monitoring in the left-side menu and click Create Policy.

    img-05-datto-policies-new-ui.png

  2. Enter a name and a description.

  3. Under Scope, select Site.

  4. For Type, select Monitoring.

  5. Under Monitors, click Add Monitor.

  6. In the Monitor Type window, click Select and choose Component from the right-side list.

  7. Under the Alert section, click Select a Component Monitor and choose Bitdefender GravityZone - Device Monitor.

    img-06-datto-component.png

  8. Next to the component, specify the interval in days for Verify Full Scan and Verify Quick Scan tasks to run.

  9. Choose an action from the drop-down list and execution intervals:

    • Verify Install to check for security agent deployment. Select 30 minutes as best practice.

    • Verify Update to check for update status. Select 3 hours as best practice.

    • Verify Full Scan to check when the security agent has executed a full scan on the target last time. Select 24 hours as best practice.

    • Verify Quick Scan to check when the security agent has executed a quick scan on the target last time. Select 8 hours as best practice.

  10. For Raise an alert of priority, select one of the available options according to your preferences.

  11. For Auto resolve the alert if it is no longer applicable, select After 10 minutes as best practice (no less than 5 minutes).

  12. Under the Response section, enable Run a Component and select Bitdefender GravityZone Endpoint Management [Datto Companion APP].

    datto_rmm_companion_app_p_300469_en.png

  13. For Action, select one of the options:

    • Install BEST to deploy the security agent.

    • Update BEST to update security agent.

    • Start Full Scan to begin a full scan task on the selected targets.

    • Start Quick Scan to begin a quick task on the selected targets.

      For the Install  BEST option, you can configure a custom name for the installation package.

      Important

      Make sure to match the component action to the monitor action from step 3. For example, Verify Install with Install BEST or Verify Quick Scan with Start Quick Scan.

    • Configure email recipients to send out notifications when the alert is raised.

  14. Enable Send an email and configure recipients for notifications when the alert is raised.

  15. After you have finished the configuration, click Add Monitor.

  16. Under Targets, click the Add Target button and select one of the categories from the drop-down list:

    • Device Filters

    • Device Groups

    • Site Groups

    For information about target categories, refer to Filters and Groups in Datto documentation.

  17. Depending on the category, select the types of devices you are interested in and click Add. You can select multiple types of devices.

    For example, under Device Filters, select and add all machines running Windows 10, Windows 11, and Windows Server 2022.

    When finished, click X to close the selection list.

    img-06-datto-component-new.png

  18. Click Enabled to make the policy active.

  19. To apply the policy immediately, click the Save and Deploy Now button.

    To only save the policy, click the Save and Deploy Later button.

Editing policies in the old UI

To edit a monitoring policy in the old UI:

  1. Log in to Web Portal.

  2. Click Sites to open the drop-down list.

  3. Go to the Policies tab of your selected site.

  4. Click on the policy name to edit.

  5. You can edit the following elements:

    • Name

    • Targets

    • Monitors

  6. Click Save and Push Changes to save changes and apply the edited monitor policy immediately.

Editing policies in the new UI

To edit a policy in the new UI:

  1. Log in to Web Portal.

  2. Go to Policies > Monitoring and click on the name of the policy you want to edit.

  3. You can edit the following elements:

    • Name and description

    • Monitors

    • Targets

    • Policy status (enabled or disabled)

  4. To apply the policy immediately, click the Save and Deploy Now button.

    To only save the policy, click the Save and Deploy Later button.

    To discard the changes, click Cancel.

Configuring policy exclusions in the old UI

You can exclude devices individually from the monitoring policy.

To configure monitoring policy exclusions:

  1. Log in to Web Portal.

  2. Click Sites to open the drop-down list.

  3. Go to the Policies tab of your selected site.

  4. Find your monitor policy under the Site Policies section.

  5. Click icon-relay-datto.pngto view the device list.

    datto_policies_exclusions_p_300469_en.png

  6. Select the All devices filter.

  7. Toggle the active state to exclude a device from the monitor policy.

    datto-exclusions.png

Note

Your Datto RMM account requires administrator rights to configure policy exclusions.

Configuring policy exclusions in the new UI

To exclude devices in the monitoring policy using the new UI:

  1. Log in to Web Portal.

  2. In the left-side menu, go to Policies > Monitoring.

    datto-policies-exclusions-newUI.png

  3. Select the policy to view its details.

  4. Scroll down to the Disabled Devices area and select it.

  5. Click the Edit button to select devices that you want to exclude.

    datto-excluded-device-edit-newUI.png

Note

Your Datto RMM account requires administrator rights to configure policy exclusions.

In this section: