Configuring Risk Response Policies in Workspace ONE
- Log in to the Workspace ONE UEM Console using your administrator account.
- Create Smart Groups for Low, Medium, and High Risk devices:
- In the left pane, navigate to GROUPS & SETTINGS > Groups > Assignment Groups, then click +ADD SMART GROUP.
- In the Name field, enter
Lookout Low Risk
. - Select the appropriate Organization Group(s), then expand the Tags dropdown and select your low risk Tag, Lookout MES - Low Risk:
- Click ADD.
- Click SAVE.This creates a new Smart Group that automatically adds any devices tagged by Lookout as Low Risk, and automatically removes any devices that have the tag removed when a threat is resolved.
- Repeat these steps to create Medium and High Risk groups.
- Create an always-on security policy for compromised Android devices:
- In the left pane, navigate to DEVICES > Profiles & Resources > Profiles, then click ADD > Add Profile.
- On the Add Profile screen, click Android.
- In the Name field, enter
Lookout Low Risk Android
. - In the Assigned Groups field, select the
Lookout Low Risk
Smart Group you created in Step 2: - Configure the rest of the profile settings based on your organization's security requirements.For example, you may wish to use the Application Control section to disable access to corporate apps.
- Click SAVE AND PUBLISH.
- Repeat these steps, but select the Apple iOS platform in order to create a policy for Low Risk iOS devices.
- Repeat Step 3 to create Medium and High Risk policies.If you create Android and iOS policies for each risk level, you will end up with a total of six policies.