About Policy Tags and Filters

A policy tag is a label you can apply to your Firewall and Mobile VPN with IPSec policies to help you organize your policies into easy to manage groups. You can apply more than one policy tag to a policy and apply any policy tag to many policies. A policy filter uses the policy tags you have applied to your policies to specify which policies appear in the policy lists on the Firewall and Mobile VPN with IPSec pages.

When you create a policy tag or filter, you must use some combination of these characters in the policy tag or filter name:

You can use the procedures in the subsequent sections to create and apply policy tags and filters in a single XTM device configuration file or a v11.7 or later Device Configuration Template. For more information about templates, see the topic Create Device Configuration Templates in the WatchGuard System Manager Help.

Create and Apply Policy Tags

To create a new policy tag, you can either select a policy and create a tag for that policy, or you can create a tag and then apply it to one or more policies. You can select a color for each policy tag to make it easy to identify the policy tag when it appears in the Tags column. This is particularly helpful when you apply more than one policy tag to a single policy. When you create a policy tag, it is added to the Tags List in the Manage Policy Tags dialog box in alphabetical order.

You can apply a policy tag from the policy list or when you define the properties in the policy configuration. If you apply more than one policy tag to a policy, the tags appear in alphabetical order in the Tags column of the policy list and in the Tags list of the policy properties. Capitalized tags appear in the list before lowercase tags.

Create and Apply a Policy Tag from the Policy List

To create a policy tag and apply it to policies:

  1. On the Firewall or Mobile VPN with IPSec page, select one or more policies in the policy list.
  1. Select Action > Add Tag to Policy > New.
    The New Policy Tag dialog box appears.

Screen shot of the New Policy Tag dialog box

  1. In the Name text box, type a descriptive name for the tag.
  2. To specify a color for this policy tag, select a color from the palette.
  3. Click OK.
    The tag is applied to the policies you selected and appears in the Tags column for those policies. The tag also appears in the Manage Policy Tags Tag List.

Add a Policy Tag to the Tag List

To create policy tags that you can apply to policies at a later time, you can add new tags to the Tag List in the Manage Policy Tags dialog box.

To add a tag to the Tag List:

  1. Select Action > Manage Tags .
    The Manage Policy Tags page appears.

Screen shot of the Manage Policy Tags dialog box

  1. Click Add.
    The New Policy Tag dialog box appears.
  2. In the Name text box, type a descriptive name for the policy tag.
  3. To specify a color for the policy tag, click the color palette and select a color.
  4. Click OK.
    The policy tag appears in the Tags list.

You can now apply the new tag to any policy.

To apply a policy tag that you have already created to one or more policies:

  1. In the policy list, select one or more policies.
  2. Select Action > Add Tag to Policy and select a tag.
    The tag is applied to the policies you selected and appears in the Tags column for those policies.

Apply a Policy Tag in the Policy

  1. Add a new policy or edit a policy in the policy list.
  1. Select the Settings tab.

Screen shot of the WG-Logging policy Settings tab

  1. In the Tags section, click Edit.
    The Select Policy Tags dialog box appears.

Screen shot of the Select Policy Tags dialog box

  1. To apply a tag to the policy, from the Available list, select a policy tag and click <<.
    The tag is moved from the Available list to the Tagged list.

Remove Policy Tags From Policies

There are two methods you can use to remove a policy tag from a policy: you can remove one or more policy tags from a single policy, or you can delete a policy tag to remove it from all the policies to which it is applied. When you remove a policy tag from a single policy, the tag remains in the Tag List so you can use the tag again later. When you delete a policy tag, it is deleted both from the Tag List and from any policies to which it was applied. You cannot use a template to delete a policy tag from a policy in a device configuration file.

To remove a single policy tag from a policy:

  1. In the policy list, select the check box for a policy.
  2. Select Action > Remove Tags from Policy and select the policy tag to remove.
    The selected policy tag is removed from the policy and the Tags column.

Screen shot of the Tags > Remove from policy menu

To remove all policy tags from a policy:

  1. In the policy list, select one ore more policies.
  2. Select Action > Remove Tag from Policy > All.
    All policy tags are removed from the selected policies and the Tags column.

To permanently remove a policy tag from the Tag List and all policies:

  1. Select Action > Manage Tags.
    The Manage Policy Tags dialog box appears.
  2. From the Tags list, select a policy tag and click Remove.
  3. Click Save.
    The selected policy tag is removed from the Tags list and from each policy to which the tag was applied. The policy tag name is also removed from the Tags column in the policies list.

To remove a policy tag from a policy:

  1. Add a new policy or edit a policy in the policy list.
  2. Select the Settings tab.
  3. Below the Tags list, click Edit.
    The Select Policy Tags dialog box appears.
  4. To remove a policy tag from the policy, from the Tagged list, select a policy tag and click >>
    The tag is moved from the Tagged list to the Available list.

Modify Policy Tags

After you have created a policy tag, you can change the name or the color of the tag. When you modify a policy tag, the changes that you make automatically appear in all the policies to which the policy tag is applied.

To change a policy tag:

  1. Select Action > Manage Tags .
    The Manage Policy Tags dialog box appears.
  2. From the Tags list, select a policy tag.
  3. Click Edit.
    The Policy Tag dialog box appears.
  4. In the Name text box, type a new descriptive name for the policy tag.
  5. From the color palette, select a new color for the policy tag.
  6. Click OK.
    The changes you made to the policy tag appear in the Tags list.
  7. Click Save.

Create and Apply a Filter

After you have created and applied policy tags to your policies, you can use the tags to filter the policy list and select which policies appear in the policy list. The criteria included in your filters is based on both AND and OR operators.

After you apply a filter, you can sort the policy list by column to further refine your view of the policies that appear in the policy list. You can also name and save the filters you create so you can apply the filter again at any time. Because saved filters are stored in your XTM device configuration file, all saved filters are available whether you manage the XTM device with Policy Manger or Fireware XTM Web UI.

When you apply a filter to the policy list, the filter remains applied to the list until you manually clear it. If you do not remove a filter before you exit the policy list, that filter is still applied when you next connect to the XTM device and view the policy list. To make sure that all of your policies appear in the policy list when you next open the configuration file, we recommend that you always clear all filters from the policy list before you exit the policy list.

To create and apply a filter:

  1. From the Filter drop-down list, select Create New Filter.
    The Policy Filter dialog box appears.

  1. In the Name text box, type a descriptive name for this filter.
  2. Select a filter option:
  3. Select the policy tags to include in the filter.
  4. Click OK.
    The selected filter is applied to the list.
  5. To clear all filters from the policy list, from the Filter drop-down list, select None.
    All filters are removed from the policy list.

Modify a Filter

You can change the policy tags and filter options that are included in a filter. You can also change the name of a filter. When you change the name of the filter, the name is automatically updated in the Filters list and in all policies to which the filter is applied.

To change the filter, name, options, and the tags in a filter:

  1. From the Filter drop-down list, select Manage Filter.
    The Manage Filters page appears.

Screen shot of the Manage Filters page

  1. From the Filters list, select the filter to modify.
  2. Click Edit.
    The Policy Filter dialog box appears.
  3. Change the filter parameters.
  4. Click OK.
    The modified filter appears in the Filters list.
  5. Click Save.

See Also

Add Policies to Your Configuration

Add a Policy from the List of Templates

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Knowledge Base