Omitir para ir al contenido principal
Cerrar

Bienvenido a Dell

Mi cuenta
  • Hacer pedidos rápida y fácilmente
  • Ver pedidos y realizar seguimiento al estado del envío
  • Cree y acceda a una lista de sus productos
  • Administre sus sitios, productos y contactos de nivel de producto de Dell EMC con Administración de la empresa.
Iniciar sesión Crear una cuenta Clientes Premier Iniciar sesión en el programa para partners
Contáctenos

Número del artículo: 000124565

How to Manage Zones in Dell Threat Defense

Resumen: Zones can be managed in Dell Threat Defense by following these instructions.

Es posible que este artículo se traduzca automáticamente. Si tiene comentarios sobre su calidad, háganoslo saber mediante el formulario en la parte inferior de esta página.

Contenido del artículo

Síntomas

Note:

Zones are used to manage and organize devices in a Dell Threat Defense administration console.

Affected Products:

Dell Threat Defense

Causa

Not applicable.

Resolución

A Dell Threat Defense administrator may:

  • Add Zone
  • Add Zone Rule
  • Remove Zone

Click the appropriate step for more details.

By default, devices are automatically added to the "unzoned" zone. It is highly recommended to create additional zones to manage device policies and product updates.

To add a zone:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Click the Zones tab.

Zones

  1. Under the Zones tab, click Add New Zone.

Add New Zone

  1. Enter a Zone Name.

Add New Zone menu

Note: The Zone Name may be a maximum of 32 characters.
  1. Select a Policy to be applied to the zone from the drop-down menu.
Note: The base configuration only contains the Default Policy. Reference How to Modify Policies in Dell Threat Defense to add additional policies.
  1. From the drop-down menu, select the Value Low, Normal, or High to indicate how threats are classified within a zone.
  2. Once Zone Name, Policy, and Value are selected, click Save.
Note: Zone Name, Policy, and Values can be edited at any time by clicking the Zone post creation.

By default, devices have to be manually moved into a zone by an administrator. Zone Rules automate this task.

To add a zone rule:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Under the Zone tab, click the appropriate Zone to add a Zone Rule.

SLN310035_en_US__15ddpkm1364e(1)

Note: The example Test zone name may differ in your environment. Reference the Add Zone section for creating additional zones.
  1. Click Create Rule.

Create Rule

  1. New devices are automatically added to the zone if When a new device is added to the organization is checked. Choose to either leave checked or clear this value.

When a new device is added to the organization

Note: If more than one zone would add the new device, the last modified rule wins if there is conflict.
  1. If any identifying attribute (such as IP, hostname, operating system, or domain) changes, devices are automatically added to a zone if When any attribute of a device has changed is checked. Choose to either leave cleared or check this value.
  2. Choose at least one rule from the drop-down menu:
    • Device Name
    • Distinguished Name (LDAP)
    • Member of (LDAP)
    • Domain Name
    • IPv4 address in range
    • Operating System

Choosing a rule

Note: More than one rule may be added by clicking the + sign.
  1. Populate the criteria for one or more rules that are selected from Step 6.

Rule criteria

  1. Select either:
    • If ALL of the following conditions are met - This option requires all rule criteria to be met in order for a device to automatically be added into a zone.
    • If ANY of the following conditions are met - This option requires at least one to be met in order for a device to automatically be added into a zone.

Any or All

  1. Select either do not apply or apply Zone policy for devices that are added to the zone.

Do not apply or apply

  1. Check Apply now to all existing devices to have previously registered devices added to the zone that meet the rule criteria.

Apply now to all existing devices

Note: Checking Apply now to all existing devices takes up to five minutes to complete. This delay depends on the number of queries being performed and the size of the environment.

Sometimes, a zone may no longer be necessary. The Dell Threat Defense tenant provides administrators the ability to remove zones.

Note: Removing a tenant does not remove the associated devices. Reference How to Remove a Device from the Dell Threat Defense Administration Console for more information.

To remove a zone:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Under the Zone tab, click the appropriate Zone to be removed.

Selecting a zone

Note:
  • The example device name may differ in your environment.
  • Devices are not deleted when a zone is removed.
  1. Click Remove.
  2. On confirmation, click Yes.

Action confirmation

Warning: A removed zone action cannot be undone. The zone must be re-created if this action occurred by mistake.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Información adicional

 

Videos

 

Propiedades del artículo

Producto comprometido

Dell Threat Defense

Fecha de la última publicación

20 dic 2022

Versión

10

Tipo de artículo

Solution

Volver al principio