Hardware reference guide

116 GlobalProtect Administrator’s Guide
Group Devices by Tag for Simplified Device Administration Manage Mobile Devices
Group Devices by Tag for Simplified Device Administration
A tag is a text label that you can assign to a managed mobile device to simplify device administration by enabling
grouping of devices. The tags you define can be used to identify a group of devices to which to apply similar
policies, to interact with OTA—for example to push a new policy or send a message. After assigning a tag to a
device, the tag is included in the host information profile (HIP) for the device. Because the HIP profile is also
shared with the GlobalProtect gateway, you can then create HIP profiles on the gateway to enable you to enforce
security policy based on tag value.
Because you can manually create the tags, they provide a flexible mechanism for achieving any type of device
provisioning or security enforcement that you require. For example, you could create tags to distinguish personal
devices from company provisioned devices. You could then create HIP objects that match specific tags,
providing endless possibilities as to how you can group managed devices for configuration deployment.
Or, if you want to be able to approve devices before you deploy policy to them, you could assign a tag to
approved devices and then create a HIP profile to only push policy to devices with the approved tag.
There are a couple of different ways to assign tags to mobile devices:
 Manually Tag Devices
 Pre-Tag Devices
Manually Tag Devices
To manually tag devices, you would create the tags you need on the Mobile Security Manager and then assign
them to the devices after enrollment as described in the following workflow:
Create Tags and Assign them to Managed Devices
Step 1 Define the tags you need for monitoring
devices, pushing deployment policies, or
enforcing security policy on the
GlobalProtect gateway.
1. Select
Setup > Tags and then click Add.
2. Enter a descriptive tag
Name for the tag. This will be the name
that you will match on when creating HIP objects/profiles for
deployment and/or security policy.
3. (Optional) Enter a comment (up to 63 alpha-numeric
characters, including special characters) that describes how you
plan to use the tag.
4. Click
OK to save the tag.