PowerProtect Data Manager 19.11 Virtual Machine User Guide

Add a protection rule

Select a protection policy and then define one or more conditions. Where applicable, create compound rules by linking multiple conditions through logical operators.

1. From the PowerProtect Data Manager UI, select Protection > Protection Rules.
   The Protection Rules window appears.
2. Click the tab to select the type of host for which you would like to add the protection rule, and then click Add. For example, Virtual Machines.
   The Add Protection Rule window opens to the Select Protection Policy page.
3. Select the target protection policy for the protection rule and then click Next.
   The Add Rule Description page appears.
4. Define the purpose of the protection rule:
   1. Name. For example, Rules Prod Finance. The name must be unique.
   2. Description. For example, Finance department production servers
   3. Click Next.
   The Add Conditions page appears.
5. Define the protection rule:
   1. Select an attribute. The available attributes depend on the selected host type and include names (such as Datacenter Name or Host Name), characteristics (such as asset size), tags (VM tags or namespace labels). The Power State attribute enables filtering of virtual machine hosts based on the state of the host (such as Power On, Power Off, or Suspended).
      NOTE If using the Host Name for the protection rule to determine which assets get included, ensure that you do not specify a host in a cluster. If you specify a host in a cluster, PowerProtect Data Manager will not protect the virtual machine assets under this host because although these assets are currently running within this host, they are not owned by the host and can be switched to another host under the same cluster at any time.
   2. Select a matching criteria. The available matching criteria depend on the selected attribute:
      • For names, matching criteria include options such as Begins with, Ends with, Contains, Does not contain, Equals, Match Regular Expression, and Does Not Match Regular Expression.

        The VM Folder Name and VM Resource Pool attributes support protection for all VM assets and resource pools in the selected folder and its subfolders.
          

      • For characteristics, matching criteria include options such as Greater than or Less than.
      • For tags, matching criteria include options such as Includes, Does not include, In, or Not in. The In and Not in criteria support multiple tags.
      • For Power State, matching criteria include options such as Equals and Does Not Equal.
      • Where the available matching criteria includes regular expressions, click for a list of supported operators and effects in a separate dialog box.
        NOTE Regular expressions for the VM Folder Name and VM Resource Pool attributes use Google RE2J syntax. The operators and effects on the Optional tab of the dialog box are unavailable for these attributes. However, the operators and effects on the Unsupported tab are available, as are the standard regular expression predefined character classes. For example, \d for a digit.

        Regular expressions for all other attributes use ElasticSearch regex syntax. These expressions do not support predefined character classes.
        

        Because predefined character classes are valid for some attributes, the UI does not mark these classes as invalid syntax. This is true even for attributes where such classes are not supported.
        

   3. Depending on the selected attribute, supply a search phrase to compare against the attribute or select an option from the list.
      The wizard displays a count of matching assets beside the rule and enables new Add Rule options for compound rules.
   For example, a rule with the filters VM Folder Name, Contains, and Finance can match assets belonging to your finance department to the selected protection policy.
6. To define a compound rule:
   The wizard only enables some Add Rule options after the successful validation of other rules in the same container. For example, rules cannot be empty.
   1. Select a logical operation, and then click the corresponding Add Rule option.
      • If you select + (AND), the new rule appears in the same container.
      • If you select Add Rule - OR, the new rule appears in a separate container.
   2. Repeat the previous step to define the new protection rule.
   3. To remove a rule from a compound rule, click for that rule.
      NOTE The wizard disables for any rules whose deletion would result in an empty container. To remove these rules, remove the entire container.
      The wizard removes the selected rule and any associated Add Rule options.
   4. To remove an entire container and any rules within it, click for that container.
      The wizard also removes any associated Add Rule options.
   5. To remove all rules, click Reset Rules.
   The wizard displays a count of matching assets beside each rule and, for each container, a count of matching assets for all rules in the container.

   NOTE The counts displayed by the Protection > Protection Rules > Add Protection Rules > Add Conditions and Protection > Protection Rules > Add Protection Rules > Add Conditions > Filtered Assets panes only count the number of assets in the filtered folders and resource pools. The counts do not include assets in subfolders or sub-resource pools. Despite the displayed count, all assets in subfolders and sub-resource pools are also protected. For existing protection rules, accurate asset counts are displayed in the Protection > Protection Rules and Protection > Protection Policies panes.
7. To see a list of unprotected assets which match the protection rule, click View Matching Assets.
   The Matching Assets window opens and displays the details of each matching asset. Verify that the list includes all expected assets, and then click Done.
8. If the protection rule and list of matching assets do not meet expectations, adjust the rules accordingly. Alternatively, reset the rules and then build the protection rule again.
9. If the protection rule and list of matching assets meet expectations, click Next.
   The Summary page appears.
10. Review the protection rule details and then click Finish.