CUSTOMIZING TAGS¶

You can create a customized tag based in a specific parameter or grouping several tags. First step before using tag into a rule is create it, to do this so to ON CMDB –> Tags –> Tags of User Devices.

Specific Parameter

Select the specific parameter to validate, using the information collected by OpenNac Agent, for example in the company you want to keep update some drivers for work station, so you can verify if the host connected to your network keep a specific driver updated.

Review the collected information through the OpenNac agent, and choose the parameter for verify.

ON CMDB –> User Devices

Filter by tags, and fill the black with agent string.

Chose the parameter you want to check. Later Declare the parameter to evaluate.

Configuration –> Agent –> Parser

Add New

Define the tag, and later use the tag in a specific policy.

ON CMDB –> Tags –> Tags of User Devices

Using customized tags in policies.

../../../_images/UsingCustomizedTags.png

Grouping Tags

OpenNac has different pre-defined tags, you can grouping and customized a tag that involves different parameters to evaluate.

Use the pre-defined tags and add some specific parameters to grouping into one tag.

ON NAC –> Tag Policies +Add New

(&,'ISS_AV_ENABLED',
(&,'ROS_WINDOWS',
(|,
(&,'VOS_WINDOWS_10_PRO','IAI_KB4048951','IAI_KB4012212','IAI_KB4088776','IAI_KB4011682','IAI_KB4018337'),
(&,'DOS_WINDOWS_7','IAI_KB4048951','IAI_KB4012212','IAI_KB4088776','IAI_KB4011682','IAI_KB4018337'))))

( ): Use the parenthesis to grouping expressions and parameters.

|: Use this character to do an OR logical operation between different parameters.

&: Use this character to do an AND logical operation between different parameters.

,: Use the comma to nest evaluation parameters.

‘ ‘: Use the quotation marks to declare parameters.

Define the tag details.

ON CMDB –> Tags –> Tags of User Devices +Add New

Using customized tags in policies.

For more information about agent parser you can verify the section custom params:ref:openNAC Agent Parser<parser>.

For management information review Agent Parser.