Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
Certains numéros d’article ont peut-être changé. Si ce n’est pas ce que vous recherchez, essayez de faire une recherche sur tous les articles. Rechercher des articles

How to Manage Zones in Dell Threat Defense

Résumé: Zones can be managed in Dell Threat Defense by following these instructions.

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.

Symptômes

Note:

Zones are used to manage and organize devices in a Dell Threat Defense administration console.


Affected Products:

Dell Threat Defense


Cause

Not applicable.

Résolution

A Dell Threat Defense administrator may:

  • Add Zone
  • Add Zone Rule
  • Remove Zone

Click the appropriate step for more details.

By default, devices are automatically added to the "unzoned" zone. It is highly recommended to create additional zones to manage device policies and product updates.

To add a zone:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Click the Zones tab.

Zones

  1. Under the Zones tab, click Add New Zone.

Add New Zone

  1. Enter a Zone Name.

Add New Zone menu

Note: The Zone Name may be a maximum of 32 characters.
  1. Select a Policy to be applied to the zone from the drop-down menu.
Note: The base configuration only contains the Default Policy. Reference How to Modify Policies in Dell Threat Defense to add additional policies.
  1. From the drop-down menu, select the Value Low, Normal, or High to indicate how threats are classified within a zone.
  2. Once Zone Name, Policy, and Value are selected, click Save.
Note: Zone Name, Policy, and Values can be edited at any time by clicking the Zone post creation.

By default, devices have to be manually moved into a zone by an administrator. Zone Rules automate this task.

To add a zone rule:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Under the Zone tab, click the appropriate Zone to add a Zone Rule.

SLN310035_en_US__15ddpkm1364e(1)

Note: The example Test zone name may differ in your environment. Reference the Add Zone section for creating additional zones.
  1. Click Create Rule.

Create Rule

  1. New devices are automatically added to the zone if When a new device is added to the organization is checked. Choose to either leave checked or clear this value.

When a new device is added to the organization

Note: If more than one zone would add the new device, the last modified rule wins if there is conflict.
  1. If any identifying attribute (such as IP, hostname, operating system, or domain) changes, devices are automatically added to a zone if When any attribute of a device has changed is checked. Choose to either leave cleared or check this value.
  2. Choose at least one rule from the drop-down menu:
    • Device Name
    • Distinguished Name (LDAP)
    • Member of (LDAP)
    • Domain Name
    • IPv4 address in range
    • Operating System

Choosing a rule

Note: More than one rule may be added by clicking the + sign.
  1. Populate the criteria for one or more rules that are selected from Step 6.

Rule criteria

  1. Select either:
    • If ALL of the following conditions are met - This option requires all rule criteria to be met in order for a device to automatically be added into a zone.
    • If ANY of the following conditions are met - This option requires at least one to be met in order for a device to automatically be added into a zone.

Any or All

  1. Select either do not apply or apply Zone policy for devices that are added to the zone.

Do not apply or apply

  1. Check Apply now to all existing devices to have previously registered devices added to the zone that meet the rule criteria.

Apply now to all existing devices

Note: Checking Apply now to all existing devices takes up to five minutes to complete. This delay depends on the number of queries being performed and the size of the environment.

Sometimes, a zone may no longer be necessary. The Dell Threat Defense tenant provides administrators the ability to remove zones.

Note: Removing a tenant does not remove the associated devices. Reference How to Remove a Device from the Dell Threat Defense Administration Console for more information.

To remove a zone:

  1. From a web browser, go to the Dell Threat Defense administration console at:
  2. Log in to Dell Threat Defense administration console.

Dell Threat Defense administration console

  1. Under the Zone tab, click the appropriate Zone to be removed.

Selecting a zone

Note:
  • The example device name may differ in your environment.
  • Devices are not deleted when a zone is removed.
  1. Click Remove.
  2. On confirmation, click Yes.

Action confirmation

Warning: A removed zone action cannot be undone. The zone must be re-created if this action occurred by mistake.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Informations supplémentaires

 

Vidéos

 

Produits concernés

Dell Threat Defense
Propriétés de l’article
Numéro d’article: 000124565
Type d’article: Solution
Dernière modification: 20 Dec 2022
Version:  10
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.