Assigning Policies to VDI Pools

To assign specific behaviors to blades, you must configure policies.

Some policies assign by default to users, not machines.

Two options are available for assigning a policy to VDI machines:

• Assignment prior to pool creation

  Assignment to a pre-defined computer group occurs during the Export Package phase.

  All clones from this Exported Package enter the computer group upon registration to the Endpoint Security Management Server A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data..

  1. Create a new Computer Group.

     • In Endpoint Web Management Console:

     • In SmartEndpoint A Check Point GUI application which connects to the Endpoint Security Management Server, to manage your Endpoint Security environment - to deploy, monitor and configure Endpoint Security clients and policies.:

  2. Export the applicable packages.

     • In Endpoint Web Management Console:

       1. From the left navigation panel, click Policy.

       2. In the Deployment Policy section, click Export Package.

     • In SmartEndpoint:

       1. Click the Deployment tab.

       2. Go to Packages For Export.

       3. Click Export to:

          

  3. Assign the new Computer Group to a relevant policy.

     • In Endpoint Web Management Console:

     • In SmartEndpoint:

  4. Install the exported package on the Golden Image.

• Assignment after pool creation

  Provision all VDI machines. Once the machines exist, assign them to a policy.

  1. Create a new Virtual Group and add all the relevant machines.

  2. Create a policy and assign it to the Virtual Group.