Creating Ivanti Mobile Threat Defense custom attributes

This is for Ivanti Neurons for MDM only. You need to create several custom device attributes that will be applied to both Android and iOS devices. In the following procedure, create custom attributes based on threat severity.

If you create custom attributes after you have configured the MTD threat management console and synchronized it with Ivanti Neurons for MDM, you will need to re-synchronize the MTD console with Ivanti Neurons for MDM before the custom attributes will appear in MTD console policies.

Before you begin 

  • Delete any existing MTD custom attributes
  • Delete any existing MTD security policies
  • Modify the default privacy policy to have no MTD-related app rules

Procedure 

  1. In the Ivanti Neurons for MDM administrator console, go to Admin > Attributes.

    Enter attribute names in lower case.

  2. Create the custom attribute mtdnotify:

    1. Click Add New. The Attribute Name and Attribute Type fields are displayed.
    2. Select the default, Device as the attribute type.
    3. Name the custom attribute mtdnotify.
    4. Click Save to monitor and notify.

    This custom attribute can be applied to Low or Normal severity threats for MTD policies within the MTD console.

  3. Create a second custom attribute called mtdblock:

    1. Click Add New.
    2. Select Device as the attribute type.
    3. Name the custom attribute mtdblock.
    4. Click Save to monitor and notify.

    This custom attribute can be applied to Elevated or Critical severity threats for MTD policies within the MTD console.

  4. Create a third custom attribute called mtdquarantine:

    1. Click Add New.
    2. Select Device as the attribute type.
    3. Name the custom attribute mtdquarantine.
    4. Click Save to monitor, notify, and quarantine.

    This custom attribute can be applied to Elevated or Critical severity threats for MTD policies within the MTD console.

  5. Create a fourth custom attribute called mtdtiered4hours:

    1. Click Add New.
    2. Select Device as the attribute type.
    3. Name the custom attribute mtdtiered4hours.
    4. Click Save to monitor and notify, wait for 4 hours, block, wait for another 4 hours, and quarantine.

    This custom attribute can be applied to Low, Normal, Elevated, or Critical severity threats for MTD policies within the MTD console.

    You can create more attributes for hours other than 4 hours.