Create Ask for Approval Policies in ESRS 2 Policy Manager

Use this procedure to create Ask for Approval policies on an ESRS 2 Policy Manager. Unlike ESRS 1, the
Remote Connection policies do not exist; you have to create them. See the Operations Guide for the details.
In this example we will create an EMCRemote Ask for Approval policy at the Symmetrix Group level to
require EMC to obtain authorization to connect to any Symmetrix deployed on the Gateway client.

General Steps
1. Launch Policy Manager
2. Create the filter
3. Set the policy to Ask for Approval
4. Ask EMC to connect to the device
5. Ensure the email notification is received and you allow the connection
6. Ensure that EMC can log onto the device
7. Create any more filters required

Detailed Procedure
1. Launch the Policy Manager.
Open Internet Explorer, launch the Policy Manager and log in with the proper credentials.
browse to:
http://<IP Address of the Policy Manager>:8090

or
https://<IP Address of the Policy Manager>:8443

Send updates to james.williams@emc.com

You will arrive on the Policy tab in Policy Manager.

2. Click the link for Explore Device Groups:

Send updates to james.williams@emc.com

3. Since we will be creating a policy at the Symmetrix Group level, click the link Symmetrix-GW.

4. Scroll down the screen and locate the Remote Application Action in the first column. Click the + sign
to the right of Remote Application Name.

Send updates to james.williams@emc.com

5. There will be one permission already created, for the SYR user. We will need to create a permission
for EMCRemote.
6. Click the Assign Filter link to the left of the red, filter icon.

7. Click the Create a new filter link.

Send updates to james.williams@emc.com

8. In the Name field, enter the name of the permission. It must be entered exactly as EMCRemote.
Enter a description. Leave the Access Right set to Ask for Approval since that is the intent of this
exercise. Leave the Expression and Time Window like it is.
For a list of the valid permission names, look in the Operations Guide, Release 2.14., table 17 is on p.
413. The valid permission names for Symmetrix are:

Click Save.

Send updates to james.williams@emc.com

9. You will see a new filter added called EMCRemote and the Access Right is set to Ask for Approval.
Click Save Changes.

10. Scroll down the screen and click the + sign to the right of Remote Application Name and you will see
the new filter called EMCRemote. Click Done.

Send updates to james.williams@emc.com

11. Click OK to update the policy.

12. If for some reason you want to change the policy for EMCRemote, click the Assign Filter link to the
left of the filter icon.

13. Click the EMCRemote link in the Name column.

Send updates to james.williams@emc.com

14. Change the Access Right to the desired selection, e. g. Always Allow and click Save.

Send updates to james.williams@emc.com

15. Click Save Changes.

16. Click Done.

Send updates to james.williams@emc.com

17. Click OK to update the policy.

18. If you have not already changed the default timeout value for remote connections, you might want to
do that now.
a. Log onto the Policy Manager.

b. Click the Remote Application link.

Send updates to james.williams@emc.com

10

c. Change the default timeout value from 5 minutes to something more reasonable, maybe 15 minutes
and click Submit.
d. Log off the Policy Manager and ask EMC to test this if desired.

Send updates to james.williams@emc.com

11