Assigning policies
Assigning policies to computers
You can manage security settings on computers using policies.
From the Network page you can view, change and assign policies for each computer or group of computers.
Note
Security settings are available for managed computers only. To easier view and manage security settings, you can filter the network inventory only by managed computers.
To view the policy assigned to a particular computer:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Computers and Virtual Machines from the views selector.
Select the group that you want from the left-side pane. All computers from the selected group are displayed in the right-side pane table.
Click the name of the managed computer you are interested in. An information window will appear.
Under General tab, in the Policy section, click the name of the current policy to view its settings.
You can change security settings as needed, provided the policy owner has allowed other users to make changes to that policy.
Note
Any change you make will affect all the computers assigned with the same policy.
For more information about computer policy settings, refer to Computer and virtual machines policies.
To assign a policy to a computer or a group:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Computers and Virtual Machines from the views selector.
Select the group that you want from the left-side pane. All computers from the selected group are displayed in the right-side pane table.
Select the check box of the computer or group that you want. You can select one or several objects of the same type only from the same level.
Click the Assign policy button at the upper side of the table.
Make the necessary settings in the Policy assignment window.
For more information, refer to Assigning policies in the "Security management" section.
Watch a full video tutorial on the topic here:
Assigning policies to virtual machines
You can manage security settings on virtual machines using policies.
From the Network page you can view, change and assign policies for each virtual machine or group of virtual machines.
Note
Security settings are available for managed virtual machines only. To view and manage security settings easier, you can filter the network inventory only by managed virtual machines.
To view the security settings assigned to a particular virtual machine:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Virtual Machines from the views selector.
Select the container that you want from the left-side pane. All virtual machines from the selected container are displayed in the right-side pane table.
Click the name of the virtual machine you are interested in. An information window will appear.
Under General tab, in the Policy section, click the name of the current policy to view its settings.
You can change security settings as needed, provided the policy owner has allowed other users to make changes to that policy.
Note
Any change you make will affect all the virtual machines assigned with the same policy.
For more information about virtual machine policy settings, refer to this section.
To assign a policy to a virtual machine or a group of virtual machines:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Virtual Machines from the views selector.
Select the container that you want from the left-side pane. All virtual machines from the selected container are displayed in the right-side pane table.
Select the check box of the entity that you want. You can select one or several objects of the same type only from the same level.
Click the Assign Policy button at the upper side of the table.
Make the necessary settings in the Policy assignment window.
Warning
For policies with Hypervisor Memory Introspection enabled, target machines may require a reboot right after policy assignment. Machines in this state are marked in the Network page with the Pending restart icon.
Assigning policies to containers
You can manage security settings on containers using policies.
From the Network page you can view, change and assign policies for each container or container host.
Note
You can assign only on-access policies to container. This limitation does not extend to container hosts.
To view the security settings assigned to a particular container:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Cloud Workloads from the views selector.
Select the container host that you want from the left-side pane. All containers from the selected container host are displayed in the right-side pane table.
Click the name of the container host you are interested in. An information window will appear.
Under General tab, in the Policy section, click the name of the current policy to view its settings.
You can change security settings as needed, provided the policy owner has allowed other users to make changes to that policy.
Note
Any change you make will affect all the containers assigned with the same policy.
For more information about container policy settings, refer to this section.
To assign a policy to a container or a container host:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Cloud Workloads from the views selector.
Select the container host that you want from the left-side pane. All containers from the selected container host are displayed in the right-side pane table.
Select the check box of the entity that you want. You can select one or several objects of the same type only from the same level.
Click the Assign Policy button at the upper side of the table.
Make the necessary settings in the Policy assignment window.
For more information, refer to Assigning Policies.
Assigning policies to mobile devices
You can manage security settings on mobile devices using policies policies.
From the Network section you can view, change and assign policies for mobile devices under your account.
You can assign policies to groups, users or specific mobile devices.
Note
A policy assigned to a user affects all devices owned by the user.
For more information, refer to Assigning Local Policies.
To view the security settings assigned to a mobile device:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Mobile Devices from the views selector.
Click the Filters menu at the upper side of the network panes area and select Devices from the View category.
Click Save.
All devices belonging to users in the selected group are displayed in the table.
Click the name of the mobile device you are interested in.
A details window will appear.
In the Security section from the Overview page, click the name of the currently assigned policy to view its settings.
You can change security settings as needed.
Note
Any change you make will also apply to all other devices on which the policy is active.
For more information, refer to Mobile Device Policies
To assign a policy to a mobile device:
Log in to GravityZone Control Center.
Go to the Network page from the left side menu.
Choose Mobile Devices from the views selector.
In the left-side pane, select the group you are interested in.
Click the Filters menu at the upper side of the network panes area and select Devices from the View category.
Click Save.
All devices belonging to users in the selected group are displayed in the table.
In the right-side pane, select the check box of the mobile device you are interested in.
Click the Assign policy button at the upper side of the table.
Make the necessary settings in the Policy assignment window.
For more information, refer to Assigning Local Policies.