A policy tag is a label you can apply to your Firewall and Mobile VPN with IPSec policies to help you organize your policies into easy to manage groups. You can apply more than one policy tag to a policy and apply any policy tag to many policies. A policy filter uses the policy tags you have applied to your policies to specify which policies appear in the policy lists on the Firewall and Mobile VPN with IPSec pages.
When you create a policy tag or filter, you must use some combination of these characters in the policy tag or filter name:
You can use the procedures in the subsequent sections to create and apply policy tags and filters in a single XTM device configuration file or a v11.7 or later Device Configuration Template.
To create a new policy tag, you can either select a policy and create a tag for that policy, or you can create a tag and then apply it to one or more policies. You can select a color for each policy tag to make it easy to identify the policy tag when it appears in the Tags column. This is particularly helpful when you apply more than one policy tag to a single policy. When you create a policy tag, it is added to the Tags List in the Manage Policy Tags dialog box in alphabetical order.
You can apply a policy tag from the policy list or when you define the properties in the policy configuration. If you apply more than one policy tag to a policy, the tags appear in alphabetical order in the Tags column of the policy list and in the Tags list of the policy properties. Capitalized tags appear in the list before lowercase tags.
To create a policy tag and apply it to policies:
To create policy tags that you can apply to policies at a later time, you can add new tags to the Tag List in the Manage Policy Tags dialog box.
To add a tag to the Tag List:
You can now apply the new tag to any policy.
To apply a policy tag that you have already created to one or more policies:
There are two methods you can use to remove a policy tag from a policy: you can remove one or more policy tags from a single policy, or you can delete a policy tag to remove it from all the policies to which it is applied. When you remove a policy tag from a single policy, the tag remains in the Tag List so you can use the tag again later. When you delete a policy tag, it is deleted both from the Tag List and from any policies to which it was applied. You cannot use a template to delete a policy tag from a policy in a device configuration file.
To remove a single policy tag from a policy:
To remove all policy tags from a policy:
To permanently remove a policy tag from the Tag List and all policies:
To remove a policy tag from a policy:
After you have created a policy tag, you can change the name or the color of the tag. When you modify a policy tag, the changes that you make automatically appear in all the policies to which the policy tag is applied.
To change a policy tag:
After you have created and applied policy tags to your policies, you can use the tags to filter the policy list and select which policies appear in the policy list. The criteria included in your filters is based on both AND and OR operators.
After you apply a filter, you can sort the policy list by column to further refine your view of the policies that appear in the policy list. You can also name and save the filters you create so you can apply the filter again at any time. Because saved filters are stored in your XTM device configuration file, all saved filters are available whether you manage the XTM device with Policy Manger or Fireware XTM Web UI.
When you apply a filter to the policy list, the filter remains applied to the list until you manually clear it. If you do not remove a filter before you exit the policy list, that filter is still applied when you next connect to the XTM device and view the policy list. To make sure that all of your policies appear in the policy list when you next open the configuration file, we recommend that you always clear all filters from the policy list before you exit the policy list.
To create and apply a filter:
You can change the policy tags and filter options that are included in a filter. You can also change the name of a filter. When you change the name of the filter, the name is automatically updated in the Filters list and in all policies to which the filter is applied.
To change the filter, name, options, and the tags in a filter:
Add Policies to Your Configuration
Add a Policy from the List of Templates