Skip Navigation
  1. BlackBerry Docs
  2. CylanceON-PREM
  3. Cylance ONPREM Administration Guide
  4. Configuring the CylanceON-PREM console
  5. CylanceON-PREM policies
  6. Policy rule sets
  7. Policy rule operators

Policy rule operators

Review the following table for a list of operators available for policy rules.
Operators
Description
Device Name
This operator uses the information provided to see if the device name matches the condition. The Device Name value is case sensitive.
  • Contains:
      The device name must contain the provided information, but it can be anywhere within the name.
  • Does Not Contain:
     The device name must not contain the provided information.
  • Does Not End With:
     The device name must not end with the provided information.
  • Does Not Start With:
     The device name must not start with the provided information.
  • Ends With:
      The device name must end with the provided information.
  • Starts With:
      The device name must start with the provided information.
Distinguished Name (LDAP)
This operator uses the information provided to see if the distinguished name matches the condition.
  • Contains:
     The distinguished name must contain the provided information, but it can be anywhere within the name.
  • Does Not Contain:
     The distinguished name must not contain the provided information.
  • Does Not End With:
     The distinguished name must not end with the provided information.
  • Does Not Start With:
     The distinguished name must not start with the provided information.
  • Ends With:
     The distinguished name must end with the provided information.
  • Starts With:
      The distinguished name must start with the provided information.
Domain name
This operator uses the information provided to see if the domain name matches the condition.
  • Contains:
     The domain name must contain the provided information, but it can be anywhere within the name.
  • Does Not Contain:
     The domain name must not contain the provided information.
  • Does Not End With:
     The domain name must not end with the provided information.
  • Does Not Start With:
      The domain name must not start with the provided information.
  • Ends With:
      The domain name must end with the provided information.
  • Starts With:
     The domain name must start with the provided information.
IPv4 Address in Range
Provide an IPv4 address range. Any device with an IP address within the given range meets this condition.
Member of (LDAP)
This operator uses the information provided to see if the device’s group membership matches the condition.
  • Contains:
     The Member Of must contain the provided information, but it can be anywhere within the member information.
  • Does Not Contain:
     The Member Of must not contain the provided information.
  • Is:
     The Member Of must match the provided information.
  • Is Not:
      The Member Of must not match the provided information.
Operating System
This operator uses the information provided to see if the device’s operating system matches the condition.
  • Is:
     The device operating system must match the selected OS.
  • Is Not:
     The device operating system must not match the selected OS.
Tag
This operator uses the information provided to see if the device has any tags that match the condition.
  • Is Any Of:
     The device must match one or more of the tags in this condition. You can add multiple tags to this condition.