Tag Management
Table of Contents
Expand all | Collapse all
-
- Firewall and PAN-OS Support of IoT Security
- IoT Security Prerequisites
- Onboard IoT Security
- Onboard IoT Security on VM-Series with Software NGFW Credits
-
- DHCP Data Collection by Traffic Type
- Firewall Deployment Options for IoT Security
- Configure a Pre-PAN-OS 10.0 Firewall with a DHCP Server
- Configure a Pre-PAN-OS 10.0 Firewall for a Local DHCP Server
- Use a Tap Interface for DHCP Visibility
- Use a Virtual Wire Interface for DHCP Visibility
- Use SNMP Network Discovery to Learn about Devices from Switches
- Use Network Discovery Polling to Discover Devices
- Use ERSPAN to Send Mirrored Traffic through GRE Tunnels
- Use DHCP Server Logs to Increase Device Visibility
- Plan for Scaling when Your Firewall Serves DHCP
- Prepare Your Firewall for IoT Security
- Configure Policies for Log Forwarding
- Control Allowed Traffic for Onboarding Devices
- Support Isolated Network Segments
- IoT Security Integration with Prisma Access
- IoT Security Licenses
- Offboard IoT Security Subscriptions
-
- Introduction to IoT Security
- IoT Security Integration with Next-generation Firewalls
- IoT Security Portal
- Vertical-themed Portals
- Device-to-Site Mapping
- Sites and Site Groups
- Networks
- Reports
- IoT Security Integration Status with Firewalls
- IoT Security Integration Status with Prisma Access
- Data Quality Diagnostics
- Authorize On-demand PCAP
- IoT Security Integrations with Third-party Products
- IoT Security and FedRAMP
Tag Management
Use device tags to organize the devices in your inventory
efficiently.
The page contains a list of all tags that you can apply to the devices in
your inventory. There are two tabs on this page:
Settings
Tag Management
System Tags
with predefined system tags and Custom Tags
with user-defined
custom tags.You can create your own custom tags
and use them to add meaningful labels to your devices.
IoT Security
creates system-defined tags based on the types of devices detected
in your environment. If manufacturing devices are found, for example,
then it creates system tags for Purdue levels 1 through 5.Follow these procedures
to manage device tags:
Create a Custom Tag and Apply It Automatically
- Define a tag.To create a custom tag, click the+icon in the upper right corner of the Custom Tags tab.The Create custom tag window opens with fields for a tag type and a tag value. The type is optional and the value is required.Optionally select or create a tag type, define a tag value, and then clickNext: Tag Rule.
- Optionally define a tag rule to apply the tag automatically.A tag rule defines a condition for applying a tag. When a device matches the filter or filters in a tag rule,IoT Securityautomatically applies the specified tag.IoT Securitynot only does this when you initially define a tag rule but it also applies the tag if it later finds new matching devices in the future. Conversely, if a device no longer match the filter,IoT Securityautomatically removes the tag from it.If you want to apply the tag when a device matches a filter, choose a previously saved filter from the list. You can also add one or more filters to apply the tag to more devices. If there are multiple filters,IoT Securityapplies a tag to a device if it matches any one of them.If you want to apply the tag manually to one or more devices on the Devices page or individually on the Device Details page instead of automatically through a tag rule, don’t select or add any filters.When done,Savethe tag.You can create a maximum of 1000 unique tags and manually apply them to a maximum of 100,000 devices. A single device can have a maximum of 100 tags applied to it.
Manually Apply Tags to One or More Devices
There are two ways to apply tags to devices:
- Manually apply tags to one or more devices on theDevicespage or to an individual device on theDevice Detailspage
- Automatically apply tags through the use of special filters called tag rules on thepageSettingsTag Management
The quickest way to tag your devices is to do so manually through the device inventory on the
Devices
page.- Filter the devices to tag.Open thepage and use the filter tool to refine the devices in the list.AssetsDevicesAfter the correct devices are listed, click theTagicon (IoT Securitydetects devices matching this filter in the future, it will tag them as well.
- Confirm the filtering parameters before applying tags.Check that the filters are the ones you want to use. If not,Canceland modify the filters before tagging the devices.To include the global filters for site and device type at the top of the Devices page, selectInclude global filters for site and device type in this filter. Clear the check box to exclude the site and device type global filters.When done, clickNext: Select tag.
- Select one or more tags and apply them.The Apply tags to this filter window opens with fields for a tag type and a tag value. The type is optional and the value is required.Optionally select or create a tag type, and select or create a tag value.To apply more than one tag, click+ Add Tag.When done,Save and Apply.IoT Securitytags the filtered devices, and if it detects new devices that match your filters in the future, it will automatically tag them as well. Likewise, if any tagged devices no longer match filters,IoT Securitywill automatically remove tags from them.The initial tagging process can take a few moments to complete, depending on how many devicesIoT Securitymust tag.
Manually Apply Tags to an Individual Device
In addition to tagging devices on the Devices
page, you can tag an individual device from its Device Details page.
- Open the Manage Tags window for an individual device.From the Devices page, click a device name to open the Device Details page for this device.Click the Action menu icon (Manage Tags.
- Apply one or more tags to the device.Optionally select or create a tag type and select or create a tag value.To apply additional tags, click+ Add Tag. You can apply a maximum of 100 tags to a single device.When done,Save.
Remove Tags from Devices
It’s possible to remove tags from individual
devices and from the
IoT Security
system.To remove a manually
applied tag from an individual device:
- Navigate to the Device Details page.
- Click the Action menu icon (Manage Tags.
- Click theXnext to a tag entry to remove it and thenSave.
You
can only remove manually applied tags from an individual device
because
IoT Security
would reassign any removed tags that are automatically
assigned as a result of tag rules. To remove automatically assigned
tags, you must remove them completely from the system.To
remove a tag from the entire
IoT Security
system:- Select.SettingsTag Management
- Click the Action menu icon (Delete Tag.When you delete a tag on the Tag Management page,IoT Securityremoves it from all devices. This operation cannot be undone, so remove tags with caution.