Creating Sky ATP Realms and Enrolling Devices or Associating Sites

Before You Begin

• Understand which type of Sky ATP license you have: free, basic, or premium. The license controls which Sky ATP features are available.

• To configure a Sky ATP realm, you must already have a Sky ATP account with an associated license.

• Ensure that the internet connectivity is available for Policy Enforcer. Without the internet connectivity, you cannot create a realm.

• Decide which region will be covered by the realm you are creating. You must a select a region when you configure a realm.

• Note that adding a device to a realm results in one or more commit operations occurring on the device to apply the Sky ATP or Policy Enforcer configuration.

Procedure

1. Select Configure>Threat Prevention>Sky ATP Realms.
2. Click the + icon.
3. Complete the initial configuration by using the guidelines in Table 234 below.

   Table 313: Fields on the Add Sky ATP Realm Page

   Field	Description
   Location	Select a region of the world from the available choices. The following options are available in the Location list: North America European Region Canada Asia Pacific By default, the North America value appears in the list. To know more about the geographic region, see here.
   Username	Enter your e-mail address. Your username for Sky ATP is your e-mail address.
   Password	Enter a unique string at least 8 characters long. Include both uppercase and lowercase letters, at least one number, and at least one special character (~!@#$%^&*()_-+={}[]|:;<>,./?); no spaces are allowed, and you cannot use the same sequence of characters that are in your username.
   Realm	Enter a name for the security realm. This should be a name that is meaningful to your organization. A realm name can only contain alphanumeric characters and the dash symbol. Once created, this name cannot be changed. Note: When you create a custom feed with a realm, the feed is associated at the site level and not at the realm level. If you modify this realm and associate new sites to it, a warning message is shown that there are custom feeds are associated with this realm. Changing the site information will change the custom feed information. You must go and edit the custom feed that was associated with this realm and verify the realm association.

4. Click Next and guided setup walks you through the steps for enrolling devices into the realm and associating sites for Policy Enforcer.

   The next steps include the following:

5. If you are using Sky ATP with PE and you have no devices in enrolled in the realm, you are asked to select devices in the box on the left and move them to the right to enroll them. All selected devices are automatically enrolled with Sky ATP when you finish guided setup. To disenroll a device, you can edit a realm and move the device back to the left side box.

   Note: Note that adding a device to a realm results in one or more commit operations occurring on the device to apply the Sky ATP or Policy Enforcer configuration.

6. Next you select a Site from the list to contain the devices. If there are no sites associated with the realm, click Create new site. See Creating Secure Fabric and Sites.

   Note: If you are using Sky ATP without PE, you are not prompted to select a site.

7. Once the devices and site are selected, you use the slidebar to choose a threshold level at which selected administrators are notified via email about infected host events. Click the+ sign if you want to add new administrators to the list.
8. Finally, you select one or more check boxes for event types you want to log.
9. Click Finish.

Related Documentation

• Sky ATP Realm Overview

• Using Guided Setup for Sky ATP

• Creating Secure Fabric and Sites