Skip Navigation
  1. BlackBerry Docs
  2. Cylance Endpoint Security
  3. Administration
  4. Cylance Endpoint Security Administration Guide
  5. Managing users, devices, and groups
  6. Manage zones

Manage zones

You can use zones to group and manage
CylancePROTECT Desktop
 devices and
CylanceOPTICS
 devices. You can group devices based on geography (for example, Asia and Europe), function (for example, Sales and IT staff), or by any criteria that your organization requires.
You can assign a device policy to a zone and apply that device policy to the
CylancePROTECT Desktop
 and
CylanceOPTICS
 devices that belong to that zone. You can also add a zone rule that can assign devices to a zone based on selected criteria, like domain name, IP address range, or operating system. A zone rule will add new devices to the zone if the device meets the rule requirements.
  1. In the management console, on the menu bar, click
    Zones
    . Do any of the following:
    • To sort zones in ascending or descending order by a column, click the name of the column.
    • To filter the zones, click Filter icon on a column and type or select the filter criteria.
  2. Do any of the following:
    Task
    Steps
    View the details for a zone.
    Click a zone name.
    Add a new zone.
    1. Click
      Add New Zone
      .
    2. In the
      Zone Name
       field, type a name for the zone.
    3. In the
      Policy
       drop-down list, click a device policy to associate with the zone.
    4. In the
      Value
       field, click the appropriate priority level for the zone. This setting has no impact on managing zones.
    5. Click
      Save
      .
    Remove a zone.
    1. Select one or more zones.
    2. Click
      Remove
      .
    3. Click
      Yes
      .
    Create a zone rule.
    Create a zone rule to automatically add devices to a zone if they meet specified criteria. The rule conditions that you specify are processed in order from top to bottom.
    1. Click a zone name.
    2. Click
      Create Rule
      .
    3. Configure the zone rule.
    4. Click
      Save
      .
    Add devices to a zone.
    The maximum number of zones a device can belong to is 75. If a device has over 75 zones, there may be unexpected results with the policy and agent assignment or an error message indicating "Failed to add selected Devices to selected Zones."
    1. Click a zone name.
    2. On the
      Devices
       tab, click
      Add Device to Zone
      .
    3. Select the devices that you want to add.
    4. If you want to apply the zone device policy to those devices, select the
      Apply zone policy to selected devices
       check box.
    5. Click
      Save
      .
    Apply the zone device policy to all users in the zone.
    This action replaces any device policies that are currently assigned to devices with the device policy that is currently assigned to the zone.
    1. Click a zone name.
    2. Select the
      Apply to all devices in this zone
       check box.
    3. Click
      Save
      .
    Copy devices to another zone.
    1. Click a zone name.
    2. On the
      Devices
       tab, select one or more devices.
    3. Click
      Copy Device
      .
    4. Select one or more zones.
    5. Click
      Save
      .
    Remove devices from the zone.
    1. Click a zone name.
    2. On the
      Devices
       tab, select one or more devices.
    3. Click
      Remove Device from Zone
      .
    4. Click
      Yes
      .
    Use zones to manage agent updates.
    You can create zone-based update rules to update the
    CylancePROTECT Desktop
     and
    CylanceOPTICS
     agents on devices. For more information, see the Cylance Endpoint Security Setup content.