When a tag is no longer relevant or no longer valid based on your business requirements, you can deactivate it by revoking it. You can also reactivate a revoked tag when necessary.
In the case of BloxOne Threat Defense Cloud, security policies having network scopes defined based on tags will continue to function even after the tags used to define the scopes have been revoked. For example, if an endpoint group has a tag key of Country and a value of India, then the rules in any security policy having the endpoint groups scope defined based on these tags will continue to work even though these tags are revoked. However, the Cloud Services Portal will show the tags as being revoked for the object. If tags are reactivated, then the tags will re-associate with their respective objects.
The exception to this behavior is when revoking a tag associated with an IPAM scope. In the case, revoking a tag associated with an IPAM scope makes policies based on tags no longer work.
To deactivate a tag, complete the following:
- From the Cloud Services Portal, click Administration -> Tags.
- Select the tag you want to revoke, and then click Revoke. You can also select the tag and click
-> Revoke. You can also select multiple tags and revoke them at the same time.
- In the confirmation dialog, click Revoke to confirm the action. The selected tag is now deactivated.
You will not be able to add a new tag using the same name as a revoked tag. You can however reactivate a revoked tag when necessary. For more information, see Reactivating Tags.
Note
When you revoke a specific tag, it will be removed from the object or objects to which the tag was previously assigned.
For more information about tags, see the following: