Policy overview

Ivanti EPMM uses policies to regulate the behavior of the devices it manages. Each policy consists of a set of rules. Ivanti EPMM groups the policies in the following categories:

• Security policies
• Privacy policies
• Lockdown policies
• Sync policies

For information about the AppConnect global policy, see the AppConnect Guide for EPMM.

Ivanti EPMM provides a set of default policies that you can use with little or no configuration. You can modify default policies, but you cannot delete them. You can distribute a policy to devices by applying a policy to a label. Ivanti EPMM then pushes the policy to the devices assigned to that label the next time the devices sync with Ivanti EPMM.

You can also create your own customized policies to replace or enhance the default policies included with Ivanti EPMM. You can edit custom policies, but, unlike default policies, you can delete custom policies from Ivanti EPMM. You apply custom policies to a label to distribute them to devices. Default policies do not require label assignment.

Ivanti EPMM allows you to apply a label to multiple policies of a given category. For example, you can assign two custom security policies to the same label. However, Ivanti EPMM only uses one security policy per device. This means that you need to prioritize the use of custom policies if you distribute to devices more than one policy of a given category.

Policy prioritization allows you to specify which policy should be used first if you have more than one policy of a given type associated with a label. For example, if you create two custom security policies, and apply the iOS label to both custom policies, you can configure custom security policy A to take precedence over custom security policy B.