On this article you will find a list of actions that will assist new admin users, as they begin using DeepArmor.
Adding a new user
- Click on the Administration tab on the left side of your DeepArmor management console.
- Click on the User tab
- On the top right click the green button that says "New User"
- Fill out the information for the new user and click "Save User"
Creating a new Device Policy
- Click on Device Policy tab located under the Administration Tab.
- You will see the current list of Policies that have been created, click on the "Add New Device Policy" button located on the top right
- You will be asked to give the Policy a name, once the name is entered you will see the current settings of the Policy you created.
- Play around with the settings until you feel confident with editing the policy settings, set different alert intervals, turn on/off certain scans
- Pilot DeepArmor on a small group of systems with Automated Alert Action set to “Alert Only” before deploying organization wide.
- During the initial deployment, it is recommended that you start with executable detection only to identify and quarantine malicious and abnormal processes and files that exist in your environment. Protection policy should be tightened in a phased approach including document and In-memory attack vectors.
- Check the management console for alerts on applications or processes that should be considered safe.
Creating a new Device Group
- Click on Device Group tab located under the Administration Tab.
- You will see the current list of Groups that have been created, click on the "New Device Group"
- You will be prompted to enter in name for your Device Group (ie: Sales) and on the dropdown box select a device policy you want the group to be associated with (ie: Sales policy)
- Click "Create Device Group" and your new device group should be displayed.
Creating Auto-Assign Rules
- Auto-Assign Rules are conditions that act as a filter for devices that will be added to your DeepArmor Console. (ie: Sales devices go to Sales Group, IT devices go to IT Group)
- Under the Device Group click on the Auto-Assign Rules tab.
- On the top right click on the button that says "New Auto-assign Rule"
- Give the Rule a name, match all or any conditions (all is recommended), assign the rules to a certain group, priority(the higher the number higher priority), and finally rules
- Operating System, Device name, Domain name etc. are some examples of rules that can be added
- Click create Rule to save your rules.
- Click the Apply All button to apply your rule changes.