End Point Control > Device Profiles

Create device profiles to configure authentication guidelines for users or groups of users based on various global, group, or user attributes. For example, you can select groups that use an Antivirus program or users with a specific Windows version.

Two kinds of profiles are available: Allow profiles and Deny profiles. Allow profiles identify attributes of the client’s network that must be present before a user is authenticated, and Deny profiles identify attributes of the network that cannot be present. If multiple profiles are defined for a group or user, connection to the SRA appliance is granted only when a client’s environment fulfills all Allow profiles for the group or user and does not fulfill any Deny profiles.

Use the End Point Control > Device Profiles page to manage device profiles.

Figure 33. End Point Control > Device Profiles

The End Point Control > Device Profiles page lists all device profiles and identifies the platform where the profile can be used. This page also contains buttons that allow you to add, edit, or delete profiles. Hover the mouse over an icon or button to identify it.

To create a device profile:
1
On the End Point Control > Device Profiles page, click the Add Device Profile button.

The Add Device Profile page is displayed.

Figure 34. End Point Control > Add Device Profile

2
In the Name field, type the name that will be used to identify the profile.
3
In the Description field, optionally type a brief description of the profile that will help identify the profile.
4
Select whether the profile is being created for Windows, Mac, Linux, iOS, or Windows Phone clients.
5
Use the Type drop-down list to select the attribute used to select users. The remaining fields on this page vary based on your selection.
6
Click the Add to current attribute button.
7
Repeat 5 and 6 for each attribute that should be included in the profile.
8
To complete the profile, click the Accept button at the upper right of the page.