Applying Group Policies to Systems Manager (MDM) Devices using Tags

Creating MDM Sentry Policies

1. Configure a group policy (or policies) on the desired Security Appliance or Wireless network.
   
    
2. Navigate to Network-wide > Configure > Sentry policies.
3. Click Add a new group policy MDM scope.
   
    
4. Select the Systems Manager network that contains that devices and tags to be used.
5. Choose the Tag scope that determines how the specified Tags will be used. For more information, refer to the article on using tags in Systems Manager.
6. Select any desired Tags that will be matched against. These can be manual or auto tags.
7. Select the Policy which should be applied to devices matching these criteria.
8. If additional policies need to be created, repeat steps 3-7 as needed. 
9. Click Save Changes.

Keep in mind that policies are processed in descending order and only apply the first match. Thus if a device is within scope for two policy mappings, only the first will be used. To reorder the policies, simply drag the move icon (four directional arrow) in the Actions column.

Deleting or Modifying Sentry Policies

To delete a Sentry policy:

1. Click the X in the Actions column for the desired policy.
2. Click Save Changes.

To modify a Sentry policy:

1. Make any desired changes to any of the columns.
2. Click Save Changes.