Policy Matrix

Policy Management > Policy Matrix

The Policy Matrix page displays the policy status of all machines your scope authorizes you to see. A policy status icon displays in the left most column for every machine on this page.

Policy Details

Hovering the cursor over a policy status icon on this page displays a Policy Details window. The Policy Details window displays two tabs.

• Policy Object Status Details - Lists every policy and policy category applied to a selected machine.
• Machine Effective Policy Settings - Lists every policy setting in effect for a selected machine. Since more than one policy can be applied to a machine, some applied settings may be ignored, based on policy assignment rules.

Table Columns

• (Policy Status Icons)

  - In Compliance - The agent settings for this machine match the settings of all policies assigned to this machine. No user action is required.

  - Marked for Deployment - At least one policy assigned to this machine has been changed and is scheduled to be deployed. No user action is required.

  - No Policy Attached - No applied policies are assigned to this machine. Consider assigning applied policies to this machine.

  - Out of Compliance - At least one agent setting does not match at least one active policy assigned to this machine. Use the Policy Details window to identify the specific policies and settings that are causing the mismatch.

  - Overridden - At least one agent setting does not match at least one active policy assigned to this machine, due to a user override. An override occurs when an agent setting is set manually by any VSA user anywhere in the system. Use the Policy Details window to confirm the override of specific policies and settings are correct. If even a single agent setting is overridden in a policy assigned to a machine, no other agent settings in that policy are enforced on that machine. Other policies assigned to the same machine remain enforced.

  - Inactive - This policy status only displays in the Policy Details window. When multiple policies are assigned to a machine and agent settings conflict, policy assignment rules determine which agent settings are obeyed and which agent settings are ignored. Ignored settings are identified as inactive. A machine can show an In Compliance policy status icon while the Policy Details windows shows specific agent settings in specific policies as Inactive. This is expected behavior. No user action is required.

• Machine ID - The machine ID a policy is assign to. Multiple will display for a machine ID, one row for each policy assigned to that machine ID.
• Machine Group - The machine group this machine ID is a member of.
• Policy - The policy assigned to this machine.
• Policy Object Types - The categories of agent settings assigned using this policy. A policy type in red text indicates that policy type is being overridden by a different policy and is not applied.
• Associated By - The type of object used to associate a machine with a policy: machine, machine group or organization.
• View - Views associated with a policy. A view filters the machines associated with a policy.
• Active - If Yes, the policy is active. Policies may be active or inactive, depending on their order or precedence, whether they have been overridden, or are out of compliance.

Policy Matrix Abbreviations

The following abbreviations display in the Policy Object Types column of the Policy Matrix page.