Assign Endpoint Security Settings in Endpoint Manager

Applies To: WatchGuard EPDR, WatchGuard EDR, WatchGuard EPP

Service Providers can assign security settings profiles to accounts and account groups through Service Provider Endpoint Manager. You can assign settings in the settings profile or you can drag setting profiles to accounts on the Settings page. When you assign a settings profile, it is automatically applied to the All group in the web UI of the target account.

If you do not want to automatically apply the settings profile to the All group, you can send the settings profile to an account or account group. In WatchGuard Endpoint Security, the administrator can assign the settings profile to the appropriate recipients. For more information, see To send an endpoint security settings profile to an account:.

After you create a security settings profile, you can assign it to WatchGuard Cloud accounts and account groups. When you assign a security settings profile, it is automatically applied to the All group in the WatchGuard Endpoint Security web UI.

To assign endpoint security settings in the profile:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select the settings type for the profile you want to assign recipients to.
  3. Select the profile from the list.
  4. Click the existing recipients or, if there are no recipients, click No Recipients Selected Yet.
    The Recipients page opens.

Screen shot of Service Provider Endpoint Manager, Settings recipients

  1. Above the first Client Groups box, click .
    The Add Clients dialog box opens.

Screen shot of Service Provider Endpoint Manager, Add Clients

  1. Select the WatchGuard Cloud account or account group you want to assign the profile to.
  1. Click Add.
    Repeat steps 5 to 7 to add another account or account group. The selected accounts and account groups display in the Client Groups box.
  1. In the upper-left corner of the page, click Back.
    The settings profile is automatically applied to the All group in the account's endpoint security product web UI.

To send an endpoint security settings profile to an account:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select the settings type for the profile you want to assign recipients to.
  3. Select the profile from the list.
  4. Click the existing recipients or, if there are no recipients, click No Recipients Selected Yet.
    The Recipients page opens.

Screen shot of Service Provider Endpoint Manager, Settings recipients

  1. In the Show in the Following Clients’ Console section, above the Client Groups box, click .
    The Add Clients dialog box opens.
  2. Select the WatchGuard Cloud account or account group you want to send the profile to.
  3. Click Add.
    Repeat steps 5 to 7 to add another account or account group. The selected accounts and groups appear in the Client Groups box.
  4. In the upper-left corner of the page, click Back.
    The settings profile appears in the web UI for the account's endpoint security product.

On the Settings page, when you select a settings type in the left pane, a list of account groups and available security settings profiles appear in the right pane.

To quickly assign a settings profile to an account, you can drag the profile to the account or account group. The security settings are automatically assigned to the account group and computers and devices that belong to the group. The account group also updates in the Recipients list of the security settings profile.

Screen shot of Service Provider Endpoint Manager, available settings profiles

To assign endpoint security settings from the Settings page:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select the settings type you want to assign the profile for.
    The account groups and available security settings profiles appear.
  3. Drag a profile to the account or account group.

Screen shot of WatchGuard Endpoint Security, assign settings

View Assigned Settings

When you assign settings, a number appears next to the profile name to show that it is assigned to an account. This number increases each time you assign the profile to an account.

To view the accounts that a settings profile is assigned to:

  • Point the mouse at the number next to the profile.
    A colored lined connects the profile to the accounts it is assigned to.

If the list of accounts in the left pane shows a black number in the colored line, then there are accounts in the folder with exceptions applied to the settings. For information on inheritance and exceptions, see Settings Ownership and Exceptions in Endpoint Manager.

Unassign an Account from a Security Settings Profile

You can unassign an account or account group from a security settings profile. When you unassign an account or account group, the computers and devices that belong to the account inherit the security settings from the All group or a parent group.

To unassign an account or account group from a profile:

  1. In Service Provider Endpoint Manager, from the top navigation bar, select Settings.
  2. From the left pane, select the settings type for the profile you want to unassign recipients from.
  3. Select the profile from the list.
  4. Click the existing recipients.
    The Recipients page opens.

Screen shot of Service Provider Endpoint Manager, unassign recipients

  1. Click × next to the name.
  2. Click Delete.

See Also

Create a Settings Profile

Manage Endpoint Security Settings Profiles

Settings Ownership and Exceptions in Endpoint Manager