5.4 Managing Devices

Grouping Devices using Labels

Labels allow you to group your devices together, making them easier to manage. You have the option to apply Labels to new devices before adding, letting you take advantage of the tuning you have already done. This means that you will not generate messages around all the Indeni Rules that exist, which means less noise for your team. 

Grouping devices helps in carrying out certain common operations with ease. These operations are reporting, device configuration backup or custom alerts. Labels are also very useful as filters when you review your issues. You can also use labels to create a segmentation of data between users to limit device visibility to certain users. See the Roles and Device Permissions for more information. 

There are two types of labels.

1. System Labels

These labels are created out of the box. System-all consists of all the devices managed by the system. When a new device is added, the label system-all is automatically applied. Conversely, when a device is removed, the system will automatically update all relevant system labels. 

System-<vendor> consists of devices from the vendor, e.g. system-blue consists of Bluecoat ProxySG and Bluecoat CAS devices. When a new vendor device is added for the first time, the system-vendor label is created automatically. The new device will be added to both the “system-all” and “system-<vendor-name>” labels. 

System labels are managed by the system. They cannot be modified manually. 

2. Custom Labels 

An administrator can create any labels using any naming convention. They can be based on the structure of your organization, or on the criticality of your operations. Or they can be just a random collection of devices. For example, you may wish to create groups such as a group containing all the security devices in a physical location. Devices can belong to multiple labels that meet your organization’s needs. 

Create a Label

Navigate to Devices, select the devices you want to be included in the new label. Hover over to the top right icons, click on the Manage Labels icon. Type in the name of the label and click on the new name (create new) row. A label will be created. 

View/Verify a Label

From Devices, click on All Labels. The system will display the list of labels. Select the label you want to verify or view and click Apply. 

The system will display the list of devices. 

Modify a Label

Whether it is adding a new device or removing a device from an existing label, you have to start by first removing all the devices from the label, then re-add them with the new device list. Let’s look at an example. From the previous screen capture, the device label site1-fw consists of two Check Point firewalls and a Palo Alto Networks firewall. Now you want to add a BlueCoat device to this label. Follow these steps:

1. Remove the three devices from the label, new-label. 

Select the three devices you want to remove from new-label as shown below. 

Then click Apply to remove these devices.

2. Verify that the three devices have been removed by clicking on the Labels drop down menu.  

3. Next, add the three devices back plus the BlueCoat device as shown below. 

Please Note: For auditing and debugging purposes, a log entry is added to indicate whenever a new label is created or a label is updated with the relevant information.

Suspend Data Collection in Maintenance Mode

If you need to put automation on hold while you take care of things like system maintenance and device upgrades, you can temporarily suspend a device. Suspension takes effect immediately and data collection halts. Maintenance mode enables you to avoid any alerts or errors that might occur when a device is taken offline for maintenance. Don’t forget to resume the device manually once the device is online again. 

Suspend a Device

  1. Locate the device you want to suspend. 
  2. Select the device, click the double vertical bar on the top left. 

Resume a Device

  1. Locate the device you want to resume automation.
  2. Select the device, click the start arrow icon on the top left. 

Please Note: In 7.9.0, you have the option to automatically resume automation by specifying a period of time for multiple devices