Views:

Policy management allows administrators to enforce product settings on managed products and endpoints from a single management console. Administrators create a policy by selecting the targets and configuring a list of product settings.

Control Manager policies have the following attributes:

Table 1. Control Manager Policy Options

Attribute

Description

Policy name

The name of the policy configuration.

Targets

Administrators can select targets to assign to their policies. The target selection method determines the policy type and how the policy works.

Administrators can manually select targets or use a filter to automatically assign targets to their policies. The target selection method determines the policy type and how the policy works.

See Policy Types for more information about policy types.

To include a managed product or endpoint as the target, make sure the product version of the managed product or endpoint supports policy management in Control Manager. The Policy Template Settings screen contains information about supported product versions.

Settings

Once Control Manager deploys a policy to the targets, the settings defined in the policy overwrite the existing settings in the targets. Control Manager enforces the policy settings in the targets every 24 hours. Although local administrators can make changes to the settings from the managed product console, the changes are overwritten every time Control Manager enforces the policy settings.

Note:

Since policy enforcement only occurs every 24 hours, the product settings in the targets may not align with the policy settings if local administrators make changes through the managed product console between the enforcement period.

Note:

Make sure to use the Product Directory to move the managed PolicyServer instance from the New Entity folder to the Endpoint Encryption folder in the Product Directory.