To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Configuration difference against root policy

Options
joe1847
joe1847 W/ Alumni Posts: 10 Security Scout

Dear community,

 

is there a possibility to report configuration differences against root policy?

For example we have  set no scan exclusion on root policy. However on some policies below we have set exclusions. Is there a possibility to report these changes?

 

Thank you in advance!

Comments

  • MJ-perComp
    MJ-perComp W/ Alumni Posts: 669 Firewall Master
    Options

    It is a very good idea to run such "inheritance reports regularly and in the result keep it small.

    The changes you did on ROOT should always only be minimal (PMS-Communication) and not involve specific settings on exclusions. All these should be done in a subdomain (e.g. "Workstations").

     

    As a general rule of thumb: Exlusions are only a temporary fix. Any installation that does not work propperly without an exclusion is considered a bug and should be reported to F-Secure Support for fixing.

    (see earlier discusions on that topic)

     

    M.

This discussion has been closed.