Policies
The 'Policy Management' interface allows administrators to configure security policies that can be deployed to endpoint groups. Each policy consists of a set of secure apps that run inside the Secure Box environment on the target endpoints. Additional settings such as root certificate checks, keyboard protection and desktop isolation can be applied to each app. You can add multiple secure apps to a policy in three different modes:
- URL Mode – The specified URL will be run inside the Secure Box environment. For example, you can specify a bank website that is used by your customers or endpoint users.
- APP Mode – The specified endpoint application will be protected by Secure Box. For example, you could specify a payment processing application on a POS terminal.
- Folder Mode – Specific folders or even entire drive partitions can be protected. Items located inside the protected folder or drive will be run inside the secure environment.
Each policy can be applied to different endpoint groups, but each group can only have one policy at a time. If you want a policy to be applied to a single endpoint, you must still create a group for it.
A policy can be applied to a group during group creation or by editing it. Refer to the section Managing Endpoint Groups for more details on selection of policy to be applied to a group while creating it.
Once a policy is applied to a group, all secure apps configured in that policy will be pushed to all endpoints in the group. If a policy is edited, for example to add new secure apps, the changes will be pushed to all endpoints in the groups to which the policy is applied during the next polling cycle.
Click the following link for more details: