Skip to main content

Create Tag Rules

When a rule is created within the XShield Security Platform, it automatically assigns the specified tags to all currently managed assets that meet the rule’s criteria. This tagging mechanism is dynamic and extends to future asset discoveries as well—ensuring that any new assets onboarded into the environment are evaluated against existing rules and tagged accordingly.

This approach guarantees consistent policy enforcement and visibility across both existing and newly discovered assets. By embedding tag logic into the rule framework, XShield enables scalable and automated asset classification, which is critical for maintaining accurate segmentation, policy application, and reporting across evolving infrastructure.

Tag rules are valuable for:​

  1. Consistency Across the Environment: As assets are discovered or onboarded, they are immediately evaluated against existing rules. This ensures that security policies and visibility configurations remain consistent without requiring manual intervention.
  2. Operational Efficiency: Security and operations teams save time and reduce errors by avoiding repetitive manual tagging. The system intelligently applies the correct tags based on predefined rules.
  3. Dynamic Policy Application: Since tags often drive segmentation, access control, and monitoring policies, automatic tagging ensures that new assets are instantly governed by the same security posture as existing ones.
  4. Scalability: In large or rapidly changing environments, manual tagging becomes impractical. Automated tag propagation supports seamless scaling of infrastructure and security operations.
  5. Improved Visibility and Reporting: Tags help categorize and filter assets in dashboards, reports, and visualizations. Automatic tagging ensures that new assets are immediately visible in the right context.

How to Create Tag Rule​

Go to Tags on the left navigation panel and select Tag Rules. Click on Create Tag Rule and follow the instructions on the screen.

Create Tag Rule

From the above example, all assets in subnet 172.16.0.0/24 are tagged as location Santa Clara.