Secure Access Service Edge:Configure and review registration information about terminals

Key concepts

Configure a terminal registration policy

A registration policy defines how many terminals each user can register. If a user exceeds the quota, they must submit an over-quota registration application. SASE displays submitted applications on the Over-quota Registration tab. After you approve an application, the user can register the terminal and access office applications.

1. Log on to the SASE console.

2. In the left-side navigation pane, choose Terminal Management > Terminal Registration.

3. On the Registered Terminal tab, click Registration Policy.

4. On the Registration Policy page, click Add.

5. In the Create Policy panel, configure the following parameters.

   Parameter	Description
   Policy Name	A name of 1–128 characters. Allowed characters: letters, digits, hyphens (-), underscores (_), and periods (.).
   Enterprise Device Registration Limit and Personal Device Registration Limit	By Total Number: The maximum number of terminals a user can register in total. By Terminal Type: Separate limits for PC terminals and mobile terminals.
   Priority	A value from 0 to 99. A lower value means higher priority.
   Applicable User	All Users or Some Users.
   Exception User	Users excluded from this policy.
   Status	Enable or disable the policy. The policy takes effect only when enabled.

The policy appears on the Registration Policy page after you save it.

Manage registered terminals

On the Registered Terminal tab, you can perform the following operations.

Review over-quota registration applications

After a user submits an over-quota registration application, review it on the Over-quota Registration tab. After you approve an application, the policy takes effect within 3–5 minutes, and the user can log on to the SASE client from the approved terminal.

1. Log on to the SASE console.

2. In the left-side navigation pane, choose Terminal Management > Terminal Registration.

3. On the Over-quota Registration tab, review the pending applications.

Take one of the following actions for each application.

To filter applications, use the controls at the top of the list.

• Filter by status: Click the All drop-down list and select All, Pending Review, Approved, or Rejected.

• Filter by user details: Click the Username drop-down list, select a search filter, and enter the search information.

Configure an anti-uninstallation policy and review uninstallation requests

Enable anti-uninstallation to prevent users from uninstalling the SASE client without approval. When enabled, users must submit an uninstallation request. After you approve the request, the user can uninstall the client.

1. Log on to the SASE console.

2. In the left-side navigation pane, choose Terminal Management > Terminal Registration.

3. On the Uninstallation Approval tab, click Anti-uninstallation Policy.

4. In the Client Anti-uninstallation Policy panel, configure the following parameters.

   Parameter	Description
   Client Configuration Switch — Client Anti-uninstallation	Turn on to prevent users from uninstalling the SASE client. Users who want to uninstall must submit a request for approval.
   Client Configuration Switch — Client Auto-start and Anti-logoff	Turn on to make the SASE client start automatically on user terminals and prevent users from closing the client.
   Effective Scope	The users or user groups to which the policy applies.
   Whitelist	Users in the whitelist can uninstall the SASE client and are not restricted by the anti-uninstallation policy.
   Approval Process Configuration	Select Users can submit an application for approval to allow uninstallation requests, then select an approval workflow. For details, see Configure an approval workflow.
   Prompt Display Configuration	The message shown in the dialog box when users attempt to uninstall the SASE client. Configurable in Chinese and English.

5. Click OK.

SASE applies the policy to all users within the effective scope.

1. On the Uninstallation Approval tab, review the uninstallation requests submitted by users.

Take one of the following actions for each request.

To filter requests, use the controls at the top of the list.

• Filter by status: Click the Review Status drop-down list and select a status.

• Filter by user details: Click the Username drop-down list, select a search filter, and enter the search information.