Policy model validation and deployment
After the zones, conduits, and devices have been configured, the security policy model can be deployed.
Changing the security policy of an item requires resetting the communications channel which results in a short loss of connectivity. During deployment, there is an option of resetting the communication as part of deployment, or deploying the changes without resetting the communication channel so that the reset can occur at a different time than the deployment process.
If changes are made to the policy after it is deployed, an asterisk
(*)
will appear next to the device, indicating that the configured policy has not been deployed to that device.After the initial deployment, a differential deployment can be done to deploy just items changed since the last deployment. Differential deployment includes any changes made in the model or made to the physical device in the field such as in the event of device replacement.
Provide Feedback