Managing Offline Freeze rules

To perform the tasks described in this topic, you need to log in to the Secure Endpoint Console as a user with the Perform permission for both Freeze Device and Remove Freeze, and the Manage permission for Rules.

You can update the Offline Freeze rule by editing its rule configurations.

To update an Offline Freeze rule:

1. On the navigation bar, click Policies > Rules.
2. On the Rules sidebar, click Offline freeze.
3. [Optional] To hide all inactive rules, click the Show inactive checkbox to clear it.
4. Click the name of the rule that you want to update.
5. In the dialog, update the timer, email addresses, and Freeze configurations as required.

6. If you want to change the devices associated with the rule, do one of the following depending on how the rule was created:

   • If the Apply to area shows, the rule was created in the Rules area. Click Edit, click the field, and then select each policy group you want to add to the rule. To remove a policy group, click its icon. When you're done, click outside the field.

   • If a View <#> devices link shows, the rule was migrated from a (Classic) Device Freeze Offline Policy. You can click the link to open a dialog showing the list of devices associated with this rule, but you can't add or remove devices. Go to the next step.

     To change the devices associated with a migrated rule, we recommend that you create a new rule with the same Offline Freeze configurations, assign the applicable policy groups, and then delete the migrated rule.

7. Click Save. The rule is updated.

Depending on the updates you made, events may be logged to Event History. The rule is updated on each device on the device's next connection to the Absolute Monitoring Center.

If you removed a policy group from the rule, and some devices in that policy group are frozen by the rule, they will remain frozen after the rule is updated. You can unfreeze the devices by submitting a Remove Freeze request from the Device Freeze Status report or by entering each device's unfreeze code directly on the device.

If the Offline Freeze rule is inactive, you can activate it.

To activate the Offline Freeze rule:

1. On the navigation bar, click Policies > Rules.
2. On the Rules sidebar, click Offline freeze.
3. Next to the rule that you want to activate, click its slider to set it to On (green).

4. If a dialog opens after you click the slider, you need to assign the rule to at least one policy group before it can be activated. Do the following:

   1. Click the field under Apply to and select one or more policy groups. Any policy groups that are already assigned an Offline Freeze rule are excluded from the list. To remove a policy group, click its icon. When you're done, click outside the field.

      If any of the selected policy groups include devices that do not meet the system requirements, those devices are ineligible and will be excluded from the rule.

      If the Apply to field isn't visible, you aren't granted sufficient permissions to work with policy groups. To proceed, save the rule and then ask a user with Manage permissions for Policies to edit your rule and assign the applicable policy groups.

   2. Click Save.

Each device's Freeze status is set to Freeze Requested, and a Device freeze requested event is logged to Event History for each device.

After the rule is activated, it is applied to the policy groups' devices on their next connection to the Absolute Monitoring Center, at which time an Offline freeze set event is logged to Event History and the Freeze status for the device is set to Set. Going forward, if the device remains offline for the number of days specified in the timer, the Secure Endpoint Agent freezes the device. You can monitor the status of your devices in Event History.

If the Offline Freeze rule is active, you can deactivate it.

To deactivate an Offline Freeze rule:

1. On the navigation bar, click Policies > Rules.
2. On the Rules sidebar, click Offline freeze.
3. [Optional] To show only active rules, click the Show inactive checkbox to clear it.
4. Next to the rule that you want to deactivate, click its slider to set it to Off (gray).
5. On the Disable Rule confirmation dialog, click Disable.

A Device freeze removed event is logged to Event History for each device, and the rule is deactivated on each device on the device's next connection to the Absolute Monitoring Center.

If any devices are frozen by the rule, they will remain frozen after the rule is deactivated. You can unfreeze the devices by submitting a Remove Freeze request from the Device Freeze Status report, or by entering each device's unfreeze code directly on the device.

You can delete an Offline Freeze rule, regardless of whether it's active or inactive. If you're deleting an active rule, you'll need to specify what to do with any devices that are currently frozen by the rule.

To delete an Offline Freeze rule:

1. On the navigation bar, click Policies > Rules.
2. On the Rules sidebar, click Offline freeze.
3. [Optional] To show only active rules, click the Show inactive checkbox to clear it.
4. Click the name of the rule that you want to delete, and near the bottom of the dialog click Delete.

5. On the Delete Rule confirmation dialog, click Delete. The rule is deleted.

   A Device freeze removed event is logged to Event History for each device, and the rule is deleted from each device on the device's next connection to the Absolute Monitoring Center.

   If any devices are frozen by the rule, they will remain frozen after the rule is deleted. You can unfreeze the devices by submitting a Remove Freeze request from the Device Freeze Status report, or by entering each device's unfreeze code directly on the device.