Policy Management

Creating and managing security policies in the admin dashboard.

Overview

Policies define the guard behavior for devices. Each policy configures all 10 guards independently with mode (block/alert/off) and guard-specific settings.

Creating a Policy

  1. Navigate to Policies
  2. Click Create Policy
  3. Configure each guard's settings
  4. Save — the policy version is set to 1

Editing a Policy

When you edit a policy, its version number is automatically incremented. All devices using this policy will detect the version change during their next heartbeat and download the updated policy.

Cloning a Policy

Use Clone Policy to create a variant of an existing policy. The clone gets a new ID and version 1.

Assigning Policies

Policies can be assigned at three levels:

  • Tenant default — Applies to all devices without a specific policy
  • Group — Applies to all devices in the group
  • Device — Overrides group and tenant policy for a specific device

Policy Format

Internally, policies are stored with 10 guard configuration columns. When pushed to agents, they are converted to a JSON format via to_agent_format().

Reports

The dashboard provides policy-related reports:

  • Compliance report — Which devices are compliant with their assigned policy
  • Guard stats — Breakdown of guard activity across all devices
  • Alerts trend — Alert volume over time, grouped by guard type