Anyone familiar with firewalls will know that such systems can end up having very many rules containing a lot of information that have to be managed. This can also be true of the Appgate SDP system. There can for example; be a large number of firewall rules that have been imported into a new system or be many entries in a form because the system has been in regular use over a prolonged period of time. To help find things there is a powerful search function and an ability to perform actions 'in bulk'; various of these tools detailed below available to help achieve these goals.
Additionally, on all relevant forms you can sort the columns. Simply click on a column header and it will sort by that column. Click again and it will reverse the sort. The arrow shows the direction of the sort applied.
Navigating the Admin UI tools
Navigation is by using the main menu at the top where the name of the Collective is displayed (PURPLE-2 in this instance) and the search bar can be found.
Main menu (left side)
Dropdowns for the main functions of Appgate SDP.
Search
Search is always available at the top of every page. Simply enter a search term (see syntax below) and the system performs a contextual search - which can include 'All Categories' when on the home page. Search will automatically change to filter on the context of the specific page you are on. Search is based on the lists that are shown in the admin UI - so might not find a specific string that is only present in a form.
History
Search includes history (max 100) which can be cleared if required.
Filter
By clicking on the icon on the right it is then possible to include additional search terms which will allow you to filter the results on matches to specific criteria such as name, health, site, status, Tags, etc., depending on the specific form. The drop down provides the relevant options.
Syntax
There are some specific syntax that can be used in search:
Normal text search | pac | pac exists somewhere in the record(s) |
IP based search | fd00:ffff:a::/48 or 172.17.93.0/24 | An IP address exists in the range specified |
Not search | -pac | pac does not exist somewhere in the record(s) |
Qualified search | name: pac | The Name field contains the word pac |
Qualifier with several words (curly brackets) | name: {pac pac2} | The Name field contains both the word pac and pac2, in any order. |
Exact string (double quotes) | name: "pac pac2” | The Name field contains the words pac pac2 in that exact order including whitespace. |
Settings 
The number of results will be shown and if they do not fit on the current page (default 30 lines), then the page length can be extended to 100, 300 1000 lines.
Secondary Menu (right side)
Alert
The alert/message icon shows if there are any new messages for the administrators of the system and provides access to the list of messages. Admin messages are likely to relate to the function / settings / configuration of the system and typically DO NOT include the health status of the Appliance. Messages are shown as Info, Warning, or Error. There is a list of all the different messages you are likely to encounter in the Appendix. This includes some suggested actions to be taken to make the message go away.
Only 30 days of messages are kept; older ones are deleted. There will still be a copy in the audit logs.
Only 100 messages of the same type will be kept; 100+ occurrences will be shown thereafter.
The displayed messages:
Have a badge to show if they are new.
Can be marked as resolved.
Can be deleted (if resolved).
Avatar
The Avatar provides access to:
Preferences: verbose main menu control and light/dark theme selection.
Admin guide: Takes you to this admin guide.
About Appgate SDP:
Sign out: of the admin UI - at which point the admin tokens are revoked. Therefore using the Sign out option is a better way to leave the admin UI than to simply close it.
Actions
On certain forms it is possible to Import items and/or to perform bulk actions.
Import
Individual items ( and Policies) can be Exported. When this has been done (from one Collective) then it is possible to Import these items into another Collective.
Bulk Actions
Bulk Actions allow operations to be performed on multiple selected items at once.
Selecting items
Bulk actions are performed on all the selected items that are visible on the current page:
Select individual items - tick line by line
Select all items - tick in the header bar
Perform a search for the items - then select all items
Performing bulk actions
Many of the bulk actions are self explanatory (Tag, Delete, Enable, Export, Disable, and Change Site); however there are a few that deserve short explanations:
Split (in Policy)
In v5.5 mixed Policies were replaced by 3 separate ones (access, admin, and device). Split will analyze selected mixed Policies and create the required new (renamed) separate Policies. The mixed Policy will be disabled.
Assign to Policy (in Entitlements)
When assigning Entitlements to a Policy please make sure to create the Policy before trying to perform the Bulk Action. Only DNS and access policy types are shown in the suggestions.
Apply Condition (in Entitlements)
This will always impose just one Condition on selected Entitlements. It does not matter what was there before, it will be gone.
If you want Always Allow Action - then select ALWAYS from the Condition list (1st option). This is effectively the bulk remove option.
If you want Risk Based access - then create a Condition based on risk first and use that. (i.e. this bulk action does not set the middle option)
If you want a specific Condition then pick it from the list (use the list exactly as it is now)
If you want to use multiple Conditions in the Entitlement then, either use Bulk action to add the first then add the next manually, or create a more complex Condition and add that.
Merge (in Entitlements)
Merging is only possible when all Entitlements are assigned to the same Site. When you merge - several things will happen:
A new disabled 'Named' Entitlement is created
All the Actions from the selected (merged) Entitlements are added to the new Entitlement
Conditions are also merged using all below are true (AND logic). This ensures security requirements are maintained however the Conditions will almost certainly need some editing before they are used.
The selected (merged) Entitlements are tagged (so they are easy to disable/delete).
Configure from source (in Appliances)
First you must select all the targets that will receive these settings, then select Bulk Actions > Configure from source. Select the Source and the Settings to replace. These settings are then copied from the source to all the selected targets.
Refresh
On certain forms, there is a refresh button and an option to set Auto-Refresh (1 minute).
The little dial shows you when the form is about to refresh.
Details View
On certain forms, once the page contains the visible items of interest, it is possible to use Details view. This expands out each item so show you some of the detail contained within.
You can click Details again to go back to normal list view.
Action Buttons
Some forms may include action buttons. Action buttons are accessed by clicking the three dots to the right of each line item in the table or from the <Actions> button within the item. They are contextual, changing depending on the type of item and the state of the item.
