To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Configuration difference against root policy

joe1847 W/ Alumni Posts: 10 Security Scout

Dear community,


is there a possibility to report configuration differences against root policy?

For example we have  set no scan exclusion on root policy. However on some policies below we have set exclusions. Is there a possibility to report these changes?


Thank you in advance!


  • MJ-perComp
    MJ-perComp W/ Alumni Posts: 669 Firewall Master

    It is a very good idea to run such "inheritance reports regularly and in the result keep it small.

    The changes you did on ROOT should always only be minimal (PMS-Communication) and not involve specific settings on exclusions. All these should be done in a subdomain (e.g. "Workstations").


    As a general rule of thumb: Exlusions are only a temporary fix. Any installation that does not work propperly without an exclusion is considered a bug and should be reported to F-Secure Support for fixing.

    (see earlier discusions on that topic)



This discussion has been closed.