Modifying a Policy

Administrators can modify policy targets and settings as necessary. The root account owner can modify every policy in the list, while other account owners can only modify the policies they created. After a policy is modified, Control Manager deploys the policy to the targets.

For a parent policy for OfficeScan agent, if you modified the targets and settings for specific features, the modifications will apply to all child policies and deployed to the respective targets. Some settings on a parent policy support permissions, which control the changes allowed on child policies. Modifications to these parent policy permissions are also applied to child policies and deployed to targets. For a list of settings that support permissions, see Working with Parent Policy Settings.

For example:

  • If you changed the scan schedule permission from "Inherit from parent" to "Are customizable", administrators can start to customize the existing schedule on their child policies.

  • If you changed the Manual Scan file extensions permission from "Extend from parent" to "Inherit from parent", any file extensions that administrators added to child policies will be removed. In addition, administrators will no longer be able to add file extensions.

  1. Navigate to Policies > Policy Management.

    The Policy Management screen appears.

  2. Select the type of product settings from the Product list.

    The screen refreshes to display policies created for the selected managed product.

  3. Click a policy name in the Policy column.

    The Edit Policy screen appears.

  4. Modify the policy.

    Modifying the filtering criteria in a filtered policy can affect target allocation. Control Manager may re-assign some targets to other filtered policies, or add additional targets to the current policy.

  5. Click Deploy.

    It usually takes a few minutes for Control Manager to deploy the policy to the targets. Click Refresh on the Policy Management screen to update the status information in the policy list. If the status of the deployment remains pending after an extended period of time, there might be issues with the targets. Check if there is a connection between Control Manager and the targets. Also check if the targets are working properly.

    Control Manager enforces the policy settings on the targets every 24 hours.