Device policies

Device policies control how the Aurora Endpoint Security agents monitor endpoints, store data, and respond to suspicious activity on devices.

Note:

  • Every device registered with Aurora Endpoint Security services must have a device policy. All devices receive the default device policy, unless another policy is assigned to the device.

  • A device can only have one policy assigned at a time. Assigning a policy to a device that already has a policy replaces the previous policy with the new one.

By default, execution control is enabled in all device policies, allowing the Aurora Protect agent to alert the Aurora Endpoint Security console when unsafe or abnormal files attempt to run. For more information about device policy settings, see Device policy settings.

To manage device policy templates instead of individual device policies, see Device policy templates.

Create a device policy

  1. Sign in to the Aurora Endpoint Security console.
  2. Click Policies > Device Policy.
  3. Click Add Policy.
  4. On the General Info tab, enter a unique name for the policy.
  5. Configure the settings for the device policy.

    For more information about policy settings, see Device policy settings.

  6. Click Save.

Edit a device policy

  1. Sign in to the Aurora Endpoint Security console.
  2. Click Policies > Device Policy.
  3. Click the name of the device policy that you want to edit.
  4. Edit the device policy settings.

    For more information about device policy settings, see Device policy settings.

  5. Click Save.

Copy a device policy

  1. Sign in to the Aurora Endpoint Security console.
  2. Click Policies > Device Policy.
  3. Click the name of the device policy that you want to copy.
  4. Click Copy.
  5. On the General Info tab, enter a unique name for the device policy.
  6. Configure the settings for the device policy.

    For more information about device policy settings, see Device policy settings.

  7. Click Save.

Assign a device policy to a device

Every device registered with Aurora Endpoint Security services must have a device policy. By default, all devices use the default device policy, unless you assign a custom policy.

Note:

A device can only have one policy assigned at a time. Assigning a policy to a device that already has a policy replaces the previous policy with the new one.

Instead of manually assigning a device policy to individual devices, you can associate a device policy with a zone. When devices are added to the zone, they are automatically assigned the associated device policy. For more information, see Add and configure a zone.

  1. Sign in to the Aurora Endpoint Security console.
  2. Click Assets > Devices.
  3. Select the devices that you want to assign a device policy to.
  4. Click Assign Policy.
  5. Select the device policy that you want to assign.
  6. Click Save.