Policy overview

Ivanti uses policies to regulate the behavior of the devices it manages. Each policy consists of a set of rules. Ivanti groups the policies in the following categories:

For information about the AppConnect global policy, see the AppConnect Guide for EPMM.

Ivanti provides a set of default policies that you can use with little or no configuration. You can modify default policies, but you cannot delete them. You can distribute a policy to devices by applying a policy to a label. Ivanti then pushes the policy to the devices assigned to that label the next time the devices sync with Ivanti.

You can also create your own customized policies to replace or enhance the default policies included with Ivanti. You can edit custom policies, but, unlike default policies, you can delete custom policies from Ivanti. You apply custom policies to a label to distribute them to devices. Default policies do not require label assignment.

Ivanti allows you to apply a label to multiple policies of a given category. For example, you can assign two custom security policies to the same label. However, Ivanti only uses one security policy per device. This means that you need to prioritize the use of custom policies if you distribute to devices more than one policy of a given category.

Policy prioritization allows you to specify which policy should be used first if you have more than one policy of a given type associated with a label. For example, if you create two custom security policies, and apply the iOS label to both custom policies, you can configure custom security policy A to take precedence over custom security policy B.