PowerProtect Data Manager 19.17 Kubernetes User Guide

Add a protection rule

Select a protection policy and then define one or more conditions. Where applicable, create compound rules by linking multiple conditions through logical operators.

1. From the PowerProtect Data Manager UI, select Protection > Protection Rules.
   The Protection Rules window appears.
2. Select the tab that corresponds to the asset type or host for which you would like to add the protection rule, and then click Add.
   PowerProtect Data Manager supports the application of protection rules for the following asset types:

   • Virtual machine
   • File System (Block Volumes)
   • Kubernetes namespaces
   • Microsoft Exchange
   • Microsoft SQL
   • Network-attached storage (NAS)
   • Oracle
   • SAP HANA
   • PowerStore block volumes
   The Add Protection Rule window opens to the Select Protection Policy page.
3. Select the target protection policy for the protection rule and then click Next.
   The Add Rule Description page appears.
4. Define the purpose of the protection rule:
   1. Name. For example, Rules Prod Finance. The name must be unique.
   2. Description. For example, Finance department production servers
   3. Click Next.
   The Add Conditions page appears.
5. Define the protection rule:
   1. Select an attribute. The available attributes depend on the selected host type.
   2. Select a matching criteria. The available matching criteria depend on the selected attribute.
      NOTE:Where the available matching criteria includes regular expressions, click for a list of supported operators and effects in a separate dialog box.
   3. Depending on the selected attribute, supply a search phrase to compare against the attribute or select an option from the list.
      The wizard displays a count of matching assets beside the rule and enables new Add Rule options for compound rules.
   For example, a rule with the filters VM Folder Name, Contains, and Finance can match assets belonging to your finance department to the selected protection policy.
6. To define a compound rule:
   The wizard only enables some Add Rule options after the successful validation of other rules in the same container. For example, rules cannot be empty.
   1. Select a logical operation, and then click the corresponding Add Rule option.
      • If you select + (AND), the new rule appears in the same container.
      • If you select Add Rule - OR, the new rule appears in a separate container.
   2. Repeat the previous step to define the new protection rule.
   3. To remove a rule from a compound rule, click for that rule.
      NOTE:The wizard disables for any rules whose deletion would result in an empty container. To remove these rules, remove the entire container.
      The wizard removes the selected rule and any associated Add Rule options.
   4. To remove an entire container and any rules within it, click for that container.
      The wizard also removes any associated Add Rule options.
   5. To remove all rules, click Reset Rules.
   The wizard displays a count of matching assets beside each rule and, for each container, a count of matching assets for all rules in the container.

   NOTE:The counts displayed by the Protection > Protection Rules > Add Protection Rules > Add Conditions and Protection > Protection Rules > Add Protection Rules > Add Conditions > Filtered Assets panes only count the number of assets in the filtered folders and resource pools. The counts do not include assets in subfolders or sub-resource pools. Despite the displayed count, all assets in subfolders and sub-resource pools are also protected. For existing protection rules, accurate asset counts are displayed in the Protection > Protection Rules and Protection > Protection Policies panes.
7. To see a list of unprotected assets which match the protection rule, click View Matching Assets.
   The Matching Assets window opens and displays the details of each matching asset. Verify that the list includes all expected assets, and then click Done.
8. If the protection rule and list of matching assets do not meet expectations, adjust the rules accordingly. Alternatively, reset the rules and then build the protection rule again.
9. If the protection rule and list of matching assets meet expectations, click Next.
   The Summary page appears.
10. Review the protection rule details and then click Finish.