Creating security posture tag groups

You must enable the visibility of this feature in Policy & Objects before it can be configured. To toggle feature visibility, go to Policy & Objects > Tools > Feature Visibility, and add or remove a checkmark for the corresponding feature.

Once a security posture tag group has been configured, you can select the object in a proxy policy with the ZTNA proxy type. See Create a new proxy policy.

To create a security posture tag group:

1. Go to Policy & Objects > Firewall Objects > Security Posture Tag, and click Create New.
   The Create New Security Posture Tag Group window opens.
   
2. Enter a name for the group.
3. Select a Security Posture Tag type from one of the following:
   • EMS
   • Geographic IP
4. Select Members to add to the security posture tag group.
   
   • When configuring an EMS tag group, members are configured in Policy & Objects > Firewall Objects > Security PostureTag with an IP or MAC object type. See Viewing security posture tags.
   • When configuring a Geographic IP tag group, members are configured in Policy & Objects > Firewall Objects > Addresses as a Firewall Address with the Type set as Geography. See Creating ZTNA geographic IP objects.
5. Click OK to save the group.