Device Policies allow you to communicate expectations and enforce device requirements to access Venn's Blue Border™ using Security Compliance Checks. You may choose to use these policies to ensure the security of the devices where users are accessing Blue Border.

As a Company Manager, you can set Default Device Policies, which are applied to all Venn users as a baseline. You can also create Policy Overrides, which allow you to set Device Policies that supersede the default policy for a single user or a group of users.

Learn more about how Device Policies and Overrides work and Venn's available Device Policies.

View Device Conditional Access Settings, Policies, and Overrides

To view your Device Conditional Access Settings, Policies, and Overrides:

1. Navigate to login.venn.com and Sign In with valid credentials.
   You may be required to verify the sign-in by completing the multifactor authentication on your mobile device.
2. Click Company admin or Manage > Company admin.

   

3. Click Policy Admin and select Device Policy in the menu at left.
4. Click the Desktops and laptops or Mobile devices tab depending on what type of policy you would like to view or adjust.

On the Device Policy page, you will see your Conditional Access setting at the top of the page, then your company's default Device Policies and any Policy Overrides that have been created at the bottom of the page.

Each Policy Override will list who they apply to and which policies differ from the default company policy.

Learn more about how Device policies and overrides work.

Manage Conditional Access Settings

You can determine whether or not to implement Conditional Access for your Device Policy, which enforces device requirements to access Blue Border for required Security Compliance Checks.

Conditional Access can be set to:

• Disabled: Users can still access and work within Venn whether or not their device passes or fails the checks. 
• Strict: Users will only be able to access and work within Venn when their devices pass all required compliance checks.

Learn more about conditional access.

To manage your conditional access settings:

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Click Change in the top right corner of the page.

   

3. Choose the conditional access setting you would like to put in place and click Apply.

   

Set or Change Your Company's Default Device Policy

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Under Default policy, click Change to the right of the policy you would like to modify.

   

3. Make adjustments and click Apply.

Learn more about the enforcement options for each Device Policy.

If you click Revert to managed, all policies will be reset to Venn's default settings in your Default Policy. You can resume self-managing your Default Policy by clicking Change next to a policy you would like to modify and confirming that you would like to self-manage your policy.

Create a Device Policy Override

To create a Device Policy Override:

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Click Add New to the right of the Policy overrides section.

   

3. Give the override a name that describes who it will apply to and/or why the override is being created.
4. Select the User, Group of people, or Group of devices (IP range) that you would like the override to apply to. 
   • User: Select a user from the dropdown. Type to search for a user by first or last name if needed. You can only apply a policy override to one individual user at a time. If you would like to create an override that applies to more than one person, consider using one of the group options described below.
   • Group of people: Select a group from the dropdown. Type to search for a group if needed. If you would like to create a new user group to assign a policy override to, you can create a new user group if needed and manage which users are in each group.
   • Group of devices (IP range): Specify an IP range and click Add IP range to add additional ranges if needed. This option is typically used to allow certain behaviors such as printing when users are in a company office or connected to the company network.
   • Data Tag: Identify users based on information in their user record such as their email address, mobile phone number, or title.

     

5. Your default policies will appear for reference. Click Change to the right of the policy that you would like to differ from the default.

   

6. Make adjustments and click Apply.
7. Click Apply in the bottom right corner of the Policy override screen.

The Policy Override will be added to your Policy Overrides list at the bottom of the Device Policy Admin page.

Change or Remove a Policy Override

To change or remove a policy override:

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Locate the override you would like to change or remove and click Edit in the Policy overrides section.

   

3. Make your modifications.
   • To change a policy, click Change next to the policy you want to modify, make adjustments, and click Apply.
   • To remove a policy, click Remove Override next to the policy you want to revert to the default and click Delete in the confirmation window.

     

4. Apply your changes.
   • To apply the adjustments you made to the Policy Override, click Apply in the bottom right.
   • To remove the Policy Override entirely, click Delete in the bottom right and then in the confirmation window.

     

Reorder Device Policy Overrides

If a user qualifies for more than one Policy Override (by name, by user group, by IP address, or by data tag), Overrides will be prioritized in the order in which they appear in the list of Overrides. 

To reorder Device Policy Overrides:

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Use the up and down arrows to reorder the overrides.

   

Learn more about how Device Policies and Overrides work.

Update Device Retention Policy

When Venn is downloaded on a device, it is added to the Device Inventory in Company Admin.

On the Device Policy Admin page, you can control the Device Retention Policy, which governs how long devices stay on the device inventory.

To adjust this setting:

1. Follow the steps above to navigate to the Device Policy Admin page.
2. Click Edit below Device retention and cleanup.
3. Choose the setting you would like to put in place and click Apply.