IoT Security Administrator’s Guide
    : Tag Management
    Focus
    Download PDF
    Focus
    1. Home
    2. IoT
    3. IoT Security Administrator’s Guide
    4. Discover IoT Devices and Take Inventory
    5. Tag Management
    Download PDF

    IoT Security Administrator’s Guide

    Tag Management

    Table of Contents

    Tag Management

    Use device tags to organize the devices in your inventory efficiently.
    The
    Settings
    Tag Management
     page contains a list of all tags that you can apply to the devices in your inventory. There are two tabs on this page:
    System Tags
     with predefined system tags and
    Custom Tags
     with user-defined custom tags.
    You can create your own custom tags and use them to add meaningful labels to your devices.
    IoT Security
     creates system-defined tags based on the types of devices detected in your environment. If manufacturing devices are found, for example, then it creates system tags for Purdue levels 1 through 5.
    Follow these procedures to manage device tags:

    Create a Custom Tag and Apply It Automatically

    1. Define a tag.
      To create a custom tag, click the
      +
       icon in the upper right corner of the Custom Tags tab.
      The Create custom tag window opens with fields for a tag type and a tag value. The type is optional and the value is required.
      Optionally select or create a tag type, define a tag value, and then click
      Next: Tag Rule
      .
    2. Optionally define a tag rule to apply the tag automatically.
      A tag rule defines a condition for applying a tag. When a device matches the filter or filters in a tag rule,
      IoT Security
       automatically applies the specified tag.
      IoT Security
       not only does this when you initially define a tag rule but it also applies the tag if it later finds new matching devices in the future. Conversely, if a device no longer match the filter,
      IoT Security
       automatically removes the tag from it.
      If you want to apply the tag when a device matches a filter, choose a previously saved filter from the list. You can also add one or more filters to apply the tag to more devices. If there are multiple filters,
      IoT Security
       applies a tag to a device if it matches any one of them.
      If you want to apply the tag manually to one or more devices on the Devices page or individually on the Device Details page instead of automatically through a tag rule, don’t select or add any filters.
      When done,
      Save
       the tag.
      You can create a maximum of 1000 unique tags and manually apply them to a maximum of 100,000 devices. A single device can have a maximum of 100 tags applied to it.

    Manually Apply Tags to One or More Devices

    There are two ways to apply tags to devices:
    • Manually apply tags to one or more devices on the
      Devices
       page or to an individual device on the
      Device Details
       page
    • Automatically apply tags through the use of special filters called tag rules on the
      Settings
      Tag Management
       page
    The quickest way to tag your devices is to do so manually through the device inventory on the
    Devices
     page.
    1. Filter the devices to tag.
      Open the
      Assets
      Devices
       page and use the filter tool to refine the devices in the list.
      After the correct devices are listed, click the
      Tag
       icon ( ) to tag the filtered devices. In fact, you’re not only tagging this set of filtered devices but you’re tagging the filter itself. If
      IoT Security
       detects devices matching this filter in the future, it will tag them as well.
    2. Confirm the filtering parameters before applying tags.
      Check that the filters are the ones you want to use. If not,
      Cancel
       and modify the filters before tagging the devices.
      To include the global filters for site and device type at the top of the Devices page, select
      Include global filters for site and device type in this filter
      . Clear the check box to exclude the site and device type global filters.
      When done, click
      Next: Select tag
      .
    3. Select one or more tags and apply them.
      The Apply tags to this filter window opens with fields for a tag type and a tag value. The type is optional and the value is required.
      Optionally select or create a tag type, and select or create a tag value.
      To apply more than one tag, click
      + Add Tag
      .
      When done,
      Save and Apply
      .
      IoT Security
       tags the filtered devices, and if it detects new devices that match your filters in the future, it will automatically tag them as well. Likewise, if any tagged devices no longer match filters,
      IoT Security
       will automatically remove tags from them.
      The initial tagging process can take a few moments to complete, depending on how many devices
      IoT Security
       must tag.

    Manually Apply Tags to an Individual Device

    In addition to tagging devices on the Devices page, you can tag an individual device from its Device Details page.
    1. Open the Manage Tags window for an individual device.
      From the Devices page, click a device name to open the Device Details page for this device.
      Click the Action menu icon ( ) in the upper right of the page and then click
      Manage Tags
      .
    2. Apply one or more tags to the device.
      Optionally select or create a tag type and select or create a tag value.
      To apply additional tags, click
      + Add Tag
      . You can apply a maximum of 100 tags to a single device.
      When done,
      Save
      .

    Remove Tags from Devices

    It’s possible to remove tags from individual devices and from the
    IoT Security
     system.
    To remove a manually applied tag from an individual device:
    1. Navigate to the Device Details page.
    2. Click the Action menu icon ( ) and then click
      Manage Tags
      .
    3. Click the
      X
       next to a tag entry to remove it and then
      Save
      .
    You can only remove manually applied tags from an individual device because
    IoT Security
     would reassign any removed tags that are automatically assigned as a result of tag rules. To remove automatically assigned tags, you must remove them completely from the system.
    To remove a tag from the entire
    IoT Security
     system:
    1. Select
      Settings
      Tag Management
      .
    2. Click the Action menu icon ( ) in the far right column and then click
      Delete Tag
      .
      When you delete a tag on the Tag Management page,
      IoT Security
       removes it from all devices. This operation cannot be undone, so remove tags with caution.

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.