B.0 Security Policy Summary
The following chart provides a summary of location support (global or location-based), assignment support (device, user, or zone), and multiple-policy support (plural or singular).
|
Global |
Location-Based |
Device Assignment |
User Assignment |
Zone Assignment |
Plural |
Singular |
|---|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Application Control
Communication Hardware
Data Encryption
Firewall
Location Assignment
Security Setting
Scripting
Storage Device Control
USB Connectivity
VPN Enforcement
Wi-Fi
Global: Can be created as a global policy. A global policy is available regardless of the device’s location.
Location-Based: Can be created as a location-based policy. A location-based policy is available only when the device’s location matches a location defined in the policy.
Device Assignment: Can be assigned to a device, device folder, or device group.
User Assignment: Can be assigned to a user, user folder, or user group.
Zone Assignment: Can be assigned as a default policy at the Management Zone.
Plural: Supports merging of multiple policies (of the same type) into one effective policy to be enforced on a device. The effective policy is a determined by established ordering and merging rules. For details, see Section 5.0, Effective Policies.
Singular: Supports enforcement of only one policy (of a single type) on a device. If multiple policies are assigned, the effective policy is determined by established ordering rules. For details, see Section 5.0, Effective Policies.