Quarantine management

Use the quarantine management to identify computers, mobile devices, devices, and users that no longer report inventory data to the Snow Inventory Server. In Snow License Manager, quarantine management is by default enabled for computers and mobile devices, but it has to be actively enabled for users and devices.

Quarantine management of computers, mobile devices, devices, and users is normally configured in Snow Management and Configuration Center. For more information, see Quarantine management .

For computers and mobile devices, you can set up more flexible quarantine rules from the Quarantine management view in Snow License Manager. You can create the rules based on, for example, computer model, operating system, or organization node.

To create and manage quarantine rules in the Quarantine management view, the following is required:

• The basic setting QUARANTINE_ACTIVE must be enabled in Snow Management and Configuration Center.

• As a user, you need to have either the Administrator role or some other role that is granted the permission Administer quarantine management.

It is not possible to save a quarantine rule that catches and manages computers or mobile devices that are already managed by other active or inactive rules. However, conflicts might occur later on if the conditions of the computers and mobile devices change. Conflicting active rules are detected during the Data Update Job. Based on the date of their creation, the Data Update Job will then keep the oldest rule active and change the status of the other rule or rules to inactive.

When you use quarantine management settings in both Snow Management and Configuration Center and Snow License Manager, the following applies:

• If a setting in Snow Management and Configuration Center overlaps with a rule in the Quarantine management view in Snow License Manager, the rule in the Quarantine management view applies.

• If a rule in Snow License Manager becomes inactive, either by a manual change in the Quarantine management view or automatically by the Data Update Job, the computers and mobile devices affected by the previously active rule can instead be caught by other active rules. If no other active rule catches them, the computers and mobile devices are managed by the general quarantine management settings in Snow Management and Configuration Center.

• The computers and mobile devices that are not caught by any active rules in the Quarantine management view are managed by the general quarantine management settings in Snow Management and Configuration Center.

Characteristics

The Quarantine management view consists of the two tabs Rules and Results.

Tab	Description
Rules	The created quarantine management rules. The Status of the rule can be Active or Inactive. The Total consumers column shows 0 for an inactive rule.
Results	The computers and mobile devices that are managed by your active quarantine management rules. Note: Only computers and mobile devices with status active or quarantined can appear on the Results tab. When there are inactive rules that would be in conflict with one or more of the active rules, you will see them in the Inactive rules column if you try to activate them.

On the Reports page, you find the report Conflicting computers in quarantine management. The report shows, for example, the name of the affected computer, the name of the rule that manages the computer, and the name of the conflicting rule. You can also access the report by selecting View report in the top-right corner of the Quarantine management view.

The Action log in Snow License Manager shows information on created, updated, and deleted rules, and manually activated and deactivated rules.

When conflicting rules are detected during the Data Update Job, information on automatically deactivated rules appears in the Data Update Job Log in Snow Management and Configuration Center.

Add quarantine management rules

You create a new quarantine management rule in three steps: Details, Consumers, and Quarantine settings.

1. On the Home menu, under Administration, select Quarantine management.

2. In the Quarantine management view, select Create rule.

3. In the Details step, do the following:

   1. In Rule name, enter a name for the rule.

   2. In Comment, enter a description of the rule and a comment on why the rule exists.

   3. Select Next step.

4. In the Consumers step, create a filter to find the computers and mobile devices for this quarantine rule. Do the following:

   1. Use the Add group or Add criteria to create your filter.

      Example:
      Computer name like Mac%
      and Organization equal to Finance

   2. To see what consumers the filter returns, select Preview results.

      note

      • The filter only returns consumers with status active or quarantined.

      • If the filter for your new quarantine rule catches consumers that are already caught by another rule, you see a warning that there are conflicts. In the preview, the affected consumers are highlighted in red and in the Rule name column you see the name of the conflicting rule.

   3. Select Next step.

5. In the Quarantine settings step, select the settings for the new rule. Do the following:

   1. In Quarantine days, enter the number of days that the computers and mobile devices need to be inactive before they are placed into quarantine and the status changes to quarantined.

   2. In Action after quarantine, select what will happen to the computers and mobile devices after the quarantine period:

      • To delete them from the system, select Delete. In Quarantine duration, enter the number of days of the quarantine period.

      • To change the status from quarantined to inactive, select Inactive. In Quarantine duration, enter the number of days of the quarantine period.
        You can also decide if you want to automatically delete them after a selectable number of days as inactive.

        • If yes, select Automatically delete after [x] days and then enter the number of days that must pass before they are deleted.

        • If no, do nothing.

      • To archive them in the system, select Archive. In Quarantine duration, enter the number of days of the quarantine period.

      • To leave them in status quarantined, select None.

6. To start using the new quarantine rule, select Activate rule.

7. Select Save.

EXAMPLE

In this example, you want to configure quarantine management for computers and mobile devices. When they have been inactive for 50 days, they will be quarantined. After a quarantine period of 20 days, they will be set to inactive. After 100 days as inactive, they will be deleted.

In the Quarantine settings step, do the following:

1. In Quarantine days, enter 50.

2. In Action after quarantine, select Inactive.

3. In Quarantine duration, enter 20.

4. Select Automatically delete after [x] days, and then enter 100.

Edit quarantine management rules

1. On the Home menu, under Administration, select Quarantine management.

2. In the Quarantine management view, on the Rules tab, find the rule that you want to edit.

3. Under Actions, select the three dots, and then select Edit.

4. Add or edit the applicable information in the Details, Consumers, and Quarantine settings steps. For details, see Add quarantine management rules.

5. Select Save.

Change the status of quarantine management rules

The status of a quarantine management rule can be Active or Inactive.

1. On the Home menu, under Administration, select Quarantine management.

2. In the Quarantine management view, on the Rules tab, find the rule that you want to change the status of.

3. Under Actions, select the three dots, and then select to Activate or to Deactivate.

Delete quarantine management rules

1. On the Home menu, under Administration, select Quarantine management.

2. In the Quarantine management view, on the Rules tab, find the rule that you want to delete.

3. Under Actions, select the three dots, and then select Delete.

4. Select OK to confirm.