Cylance - Delete Devices
  • 22 Sep 2024
  • 2 Minutes to read
  • Dark
    Light
  • PDF

Cylance - Delete Devices

  • Dark
    Light
  • PDF

Article summary

Cylance - Delete Devices deletes assets in Cylance for each asset that matches the parameters of the selected saved query, and the other Enforcement Action settings or the assets selected on the relevant asset page.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

General Settings

  • Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
  • Add description - Add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
  • Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
  • Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
  • Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

  • Use stored credentials from CylancePROTECT adapter - Select this option to use the first CylancePROTECT connected adapter credentials. SAS Concur
    • When you select this option, the Select Adapter Connection drop-down is available. Select the adapter connection to use for this Enforcement Action.

Required Fields

These fields are required to run the Enforcement Action.

Additional Fields

These fields are optional.

Connection and Credentials

When Use stored credentials from the adapter is toggled off, these fields need to be configured:

  • Cylance Domain - Use protectapi.cylance.com. Note this value is different than the common domain, which is protect.cylance.com.

  • Application ID , Application Secret and Tenant API Key - The application ID, secret and associated API Key created in the 'Integrations' section of the Cylance console.

  • Tenant Tag - Automatically tag all devices discovered by the specific adapter server.

  • Cylance Zones Include list - Specify a comma-separated list of Cylance zones. The connection for this adapter will only fetch devices associated with at least one of the zones provided in this list. Otherwise, it will fetch all devices from Cylance.

  • Cylance Zones Exclude list - Specify a comma-separated list of Cylance zones. The connection for this adapter will not fetch devices associated with at least one of the zones provided in this list. Otherwise, it will fetch all devices from Cylance.

  • HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

  • Gateway Name - Select the Gateway through which to connect to perform the action.

For more details about other Enforcement Actions available, see Action Library.



Was this article helpful?