Setting up a Compliance Policy

Before you begin

You must sign in to the SOTI Connect web console as an administrator with Modify Rules permission.

About this task

This section describes how to set up compliance policies and create rules that define criteria to categorize devices as non-compliant.

Procedure

  1. From the main menu, select Rules > Compliance Rules.
  2. Select the New Rule icon.
    Compliance rule add new
  3. In the Select Rule tab of the Add New Rule panel, enter a name and description for your rule. Select Customize criteria that define whether or not your devices are compliant and select Next.
    Compliance rule selection
  4. In the Select Items tab of the Add New Rule panel, select either:
    • Devices from the Devices drop-down (red box).

      OR

    • a device type from the Types drop-down. When specifying a device type, you can also optionally specify a group from the Groups drop-down (blue box)
      Note: Specifying a group limits the selection to device types available for that group.
    Compliance rule select items
  5. To specify devices, in the Devices drop-down, select the devices that the rule applies to. Select Next.
    Compliance rule select devices
    Note: In this example, "mqtt" in the search field reduces the number of devices displayed for selection to those that match the search term.
  6. To specify a device type, select one from the Types drop-down.
    Compliance rule select device types
    To optionally narrow the device type selection to a device type within a device group, select a group from the Groups drop-down.
    Compliance rule select device groups
    Select Next.
  7. In the Setup tab of the Add New Rule panel, select the Add icon.
    Compliance rule setup
    In the Add Non-Compliant Criteria panel, specify the non-compliant criteria as shown below and select the Add button.
    Compliance rule criteria
    Note: You can add more non-compliant criteria to create a more complex compliance rule.
  8. Add another non-compliant criteria, similar to the one just created, but specify State = Red instead of Yellow
    Compliance rule additional criteria
  9. Select Finish to complete the new rule.
    Compliance rule creation completions
    Note: When there is more than one non-compliant criteria in a compliance policy, a drop-down list containing AND and OR appears. To cause the compliance policy to detect non-compliance when any of the non-compliance criteria apply, select OR. To cause the compliance policy to detect non-compliance when all non-compliant criteria apply, select AND. When selecting AND or OR, the selection automatically applies to all non-compliant criteria.
  10. The newly created rule displays in the Rules view.
    Compliance rule newly created
    Note: Newly created rules are active by default.

Results

The new compliance policy is visible in the Rules view with the Rule Type set to Compliance. In the Rules view, you can edit the compliance policy as needed or activate and deactivate it.

What to do next

You can edit the compliance policy (see Editing a Compliance Policy), disable it (see Enabling and Disabling a Compliance Policy) or check device compliance (see Checking Device Compliance).