Endpoints

A policy is applied to one or more endpoints and/or tags. When assigned to a tag, the policy is assigned to all of the endpoints in that tag and any sub-tags.

When a tag is added, that tag displays in the Policy View under the Name column and can be expanded to show all of the sub-tags and endpoints that have been added to the policy.

Note: You can also add selected endpoints from a tag or create and add a new tag to a policy containing only the desired endpoints.

To remove a tag or an endpoint from the policy:

• Click the tag or endpoint and select the Remove button from the Endpoints group.
• Alternatively, you can right-click on the tag or endpoint and select Add or Remove.

A confirmation dialog displays confirming "The selected row will be permanently deleted. Would you like to delete this row?". It is not possible to remove individual endpoints from the policy if their parent tag has been added. Clicking on an endpoint or a tag beneath a tag that was added will show a disabled Remove option. Any tag or endpoint at the top level of the list can be removed.

Endpoints and tags can be assigned to any number of policies. The Console uses the types of policies and their priorities to create a single resultant policy that is then applied to each endpoint.

The Endpoint Version column displays the version of each endpoint.

The State column is displayed next to each endpoint (not next to tags) and displays one of the following values:

• Never Applied: The endpoint has never applied the policy.
• Pending Update: The Console has a new policy for the endpoint but the endpoint has not yet applied the policy.
• Up to date: The endpoint has applied the latest policy.

Note: If an endpoint has only a single policy applied to it and that policy is removed, the policy settings will still be in effect for that endpoint until the Update Policy States service job is run and the endpoint polls the Console.