Working With Rules; Creating A Rule - Check Point HARMONY R81 Administration Manual

Working With Rules

The policy for each Endpoint Security component is made up of rules.
Each component has a default rule that applies to the
the default rule for the component, but you cannot delete it.
For each component, you can add rules that apply to specific parts (entities) of the
organization.
n To create a rule, select an existing rule and from the Policy toolbar, click Create a Rule
n To create a rule with same settings as an existing rule, right-click the rule and select
Clone Rule.
n To delete a rule, select the rule, right-click, and select Delete Rule.

Creating a Rule

For each component, you can add one or more rules that apply to specific parts (entities) of the
organization.
The new rule is added to the bottom of the policy of the component.
To create a rule:
1. Select an existing rule
2. In the Policy toolbar, click Create a Rule
The Create Rule Wizard opens.
3. On the Select Enforcement state page, select Add Rule for and select a state:
Connected, Disconnected, or Restricted.
Endpoint Security can enforce policy rules on computers and users based on their
connection and compliance state.
When you create a policy rule, you select the connection and compliance states for
which the rule is enforced. You can define rules with these states:
n Connected state rule is enforced when a compliant endpoint computer has a
connection to the Endpoint Security Management Server. This is the default rule
for a component policy. It applies if there is no rule for the Disconnected or
Restricted states of the component. All components have a Connected Rule.
Entire Organization. You can change
R81 Harmony Endpoint Server Administration Guide | 143
Working With Rules