Filter
Top Products
5-46
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 5 Managing Policies
Managing Policies in Device View and the Site-to-Site VPN Manager
Step 3 Click Save. You are asked to confirm that you want to save your changes, reminding you that the changes
you made will be applied to all devices or topologies to which the policy is assigned.
Modifying Shared Policy Assignments in Device View or the Site-to-Site VPN Manager
You can modify the list of devices or VPN topologies assigned a particular shared policy as required. If
you remove a device or topology from a policy assignment, that policy is effectively removed from the
device’s or topology’s planned configuration. Upon deployment, any configuration of that type that
exists on the device or topology is removed. For more information about the implications of unassigning
a policy, see Unassigning a Policy, page 5-33.
Caution Use the policy assignment feature with care, as unassigning a policy removes that configuration from the
device or topology and can have unintended consequences. For example, if you unassign a device access
policy from a Cisco IOS router and then deploy that change, you might prevent Security Manager from
configuring that device in the future (see User Accounts and Device Credentials on Cisco IOS Routers,
page 60-13).
Policy assignment can also be modified from Policy view. For more information, see Modifying Policy
Assignments in Policy View, page 5-51.
Related Topics
• Understanding the Device View, page 3-1
• Using the Policy Banner, page 5-35
• Assigning a Shared Policy to a Device or VPN Topology, page 5-41
• Unassigning a Policy, page 5-33
• Copying Policies Between Devices, page 5-31
• Working with Shared Policies in Device View or the Site-to-Site VPN Manager, page 5-34
• Inheriting or Uninheriting Rules, page 5-43
• Inheritance vs. Assignment, page 5-6
Step 1 In Device view or the Site-to-Site VPN Manager, select a shared policy from the Policies selector, then
do one of the following:
• (Device view only) Select Policy > Edit Policy Assignments.
• Right-click the policy and select Edit Policy Assignments.
• Click the n device/VPN link in the Assigned To field in the policy banner.
Step 2 Modify the list of devices or VPN topologies to which the policy is assigned, as follows:
• To assign the selected policy to additional devices or topologies, select them from the Available
Devices/VPNs list, then click >> to move them to the Assigned Devices list.
• To unassign the selected policy from devices or topologies, select them from the Assigned
Devices/VPNs list, then click << to return them to the Available Devices/VPNs list. Devices or
topologies that are unassigned from the policy remove this policy from their running configuration
during deployment.