Product Guide › Administering CA Access Control for Virtual Environments › Assets Tagging › How You Use Tags To Administer Security Groups › Create Tag Rules in CA Access Control Enterprise Management

Create Tag Rules in CA Access Control Enterprise Management

Create a tag rule to assign managed devices to security groups based on properties that you define. When CA Access Control for Virtual Environments discovers a managed device with an IP address that matches a tag rule, the device is tagged and associated with a security group.

Follow these steps:

1. Go to World View, Tags, Create Tag Rule.

   The Create Tag Rule: Tag Rule Search window opens.

2. (Optional) Select an existing tag rule to create the tag as a copy of it, as follows:
   1. Select Create a copy of a new object of type Tag Rule.
   2. Select an attribute for the search, type in the filter value, and click Search.

      A list of tag rules that match the filter criteria appears.

   3. Select the object you want to use as a basis for the new tag.
3. Click OK.

   The Create Tag Rule window appears.

4. Complete the following fields:

   Name

   Specify the name of the tag rule

   Description

   Specify a description for the tag rule

   Applied Tag

   Select the tag to associate with the tagging rule

   Matching Object Type

   Displays the object type that the tag rule applies

   Criteria

   Specifies the tag rule criteria as follows:

   Name|IP Address|Host[equal|not equal] managed_device
   

   Name

   Specifies the managed device DNS name

   IP

   Specifies the managed device IP address

   OS Information

   Specifies the managed device operating system, as defined in the VMware vCenter

   VM Network

   Specifies the name of the virtual network that the managed device uses

   Annotation

   Specifies the annotation key and value, as defined in the VMware vCenter.

   Example: "Owner=John"

   Note: Use wildcards (*) to apply the tag rule to more than a single managed device

5. Click Submit.

   CA Access Control Enterprise Management creates and applies the tag rule to the managed devices