Venn conducts continuous compliance monitoring in order to actively ensure the security of the devices where users are accessing Blue Border™. As a Company Manager, you can configure Device Policies, which allow you to communicate expectations and enforce device requirements to access Venn's Blue Border using Security Compliance Checks. 

Learn about available Device Policies for mobile devices.

How Device Policies Work

As a Company Manager, you can define device expectations for your users by configuring Device Policies and Policies Overrides. You can also determine the degree to which these expectations are enforced by configuring your Conditional Access setting and Security Compliance Check states.

Default Policy and Policy Overrides

Your company's Default Policy sets the standard device expectations and requirements that apply to all Venn users by default. You can also create Policy Overrides, which allow you to set Device Policies that supersede the default policy for a single user or a group of users. Policy Overrides can be created for an individual user by name, for a user group, or for an IP address.

For example, if you want to require that users' devices have a screen saver timeout setting in place on all devices that are not in your secure data center, you could set up the following using the Screen Saver Timeout Device Policy:

• Default: Set your Screen Saver Timeout Policy to Required
• Override: Create a policy override for your data center's network IP address range and set the Screen Saver Timeout Policy to Recommended or Not Checked for that group

Conditional Access Setting

All defined (required and recommended) Device Policies are checked when users log in to Venn and continuously monitored when they are logged in. You can determine whether or not to implement Conditional Access for your Device Policy, which enforces device requirements to access Blue Border for required Security Compliance Checks.

Conditional Access can be set to:

• Disabled: Users can still access and work within Venn whether or not their device passes or fails the checks. 
• Strict: Users will only be able to access and work within Venn when their devices pass all required compliance checks.
  • If a user's device does not pass all required compliance checks when they are logging in to Venn, they will not be able to access Venn until they pass required checks.
  • If a user is already logged in when their device goes out of compliance, they will receive a three-minute warning, which gives them time to fix the issue before they are logged out of Venn. The user will not be able to launch any additional apps in Blue Border during the three-minute warning this time.

We recommend disabling conditional access when your company first starts using Venn in order to communicate expectations without barring access to Venn. You can then monitor and work with users to get their devices in compliance before setting conditional access to strict.

Security Compliance Check States

You can choose to set the following states for each Security Compliance Check:

• Not Checked: Policy will not be checked
• Recommended: Policy will be checked when users log in to Venn and continuously monitored when they are logged in; users will not be prevented from accessing Venn on their device if they fail this check when Conditional Access is set to Strict
• Required: Policy will be checked when users log in to Venn and continuously monitored when they are logged in; users will be prevented from accessing Venn on their device if they fail this check when Conditional Access is set to Strict

Compliance Status is reported to the user and tracked in Company Admin.

How to Configure Device Policies

As a Company Manager, you can manage your company's Device Policies on the Device Policy page in Company Admin. Learn how to configure and manage Device Policies for your company.

Available Device Policies for Desktops and Laptops