Automatic device tagging

You can create and edit automatic tagging rules in the Administration Server properties window.

To tag devices automatically:

1. In the console tree, select the node with the name of the Administration Server for which you have to specify tagging rules.
2. In the context menu of the Administration Server, select Properties.
3. In the Administration Server properties window, select the Tagging rules section.
4. In the Tagging rules section, click the Add button.

   The New rule window opens.

5. In the New rule window, configure the general properties of the rule:
   • Specify the rule name.

     The rule name cannot be more than 255 characters long and cannot include any special characters (such as "*<>?\:|).

   • Enable or disable the rule using the Enable rule check box.

     By default, the Enable rule check box is selected.

   • In the Tag field, enter the tag name.

     The tag name cannot be more than 255 characters long and cannot include any special characters (such as "*<>?\:|).

6. In the Conditions section, click the Add button to add a new condition, or click the Properties button to edit an existing condition.

   The New auto-tagging rule condition wizard window opens.

7. In the Tag assignment condition window, select the check boxes for the conditions that must affect tagging. You can select multiple conditions.
8. Depending on which tagging conditions you selected, the wizard displays the windows for setup of the corresponding conditions. Set up the triggering of the rule by the following conditions:
   • Device's use or association with a specific network—Network properties of the device, such as device name in the Windows network, and device inclusion in a domain or an IP subnet.

     If case sensitive collation is set for the database that you use for Kaspersky Security Center, keep case when you specify a device DNS name. Otherwise, the auto-tagging rule will not work.

   • Use of Active Directory—Presence of the device in an Active Directory organizational unit and membership of the device in an Active Directory group.
   • Specific applications—Presence of Network Agent on the device, operating system type, version, and architecture.
   • Virtual machines—Inclusion of the device in a specific type of virtual machines.
   • Application from the applications registry installed—Presence of applications of different vendors on the device.
9. After the condition is set up, enter a name for it, and then close the wizard.

   If necessary, you can set multiple conditions for a single rule. In this case, the tag will be assigned to a device if it meets at least one condition. The conditions that you added will be displayed in the rule properties window.

10. Click OK in the New rule window, then click OK in the Administration Server properties window.

The newly created rules are enforced on devices managed by the selected Administration Server. If the settings of a device meet the rule conditions, the device is assigned the tag.