General policy settings

Expand all | Collapse all

一般

In the 一般 tab, you can modify the policy status and specify the inheritance of policy settings:

• In the 政策狀態 block, you can select one of the policy modes:
  • 作用中

    If this option is selected, the policy becomes active.

    By default, this option is selected.

  • 漫遊

    If this option is selected, the policy becomes active when the device leaves the corporate network.

  • 非作用中

    If this option is selected, the policy becomes inactive, but it is still stored in the Policies folder. If required, the policy can be activated.

• In the 設定繼承 settings group, you can configure the policy inheritance:
  • 從父政策繼承設定

    If this option is enabled, the policy setting values are inherited from the upper-level group policy and, therefore, are locked.

    By default, this option is enabled.

  • 在子政策中強制繼承設定

    If this option is enabled, after policy changes are applied, the following actions will be performed:

    • The values of the policy settings will be propagated to the policies of administration subgroups, that is, to the child policies.
    • In the Settings inheritance block of the General section in the properties window of each child policy, the Inherit settings from parent policy option will be automatically enabled.

    If this option is enabled, the child policies settings are locked.

    By default, this option is disabled.

事件配置

The 事件配置 tab allows you to configure event logging and event notification. Events are distributed by importance level on the following tabs:

• 緊急

  The 緊急 section is not displayed in the Network Agent policy properties.

• 功能失效
• 警告
• 資訊

In each section, the list shows the types of events and the default event storage term on the Administration Server (in days). Clicking an event type lets you specify the following settings:

• 事件註冊

  You can specify how many days to store the event and select where to store the event:

  • 使用 Syslog 匯出到 SIEM 系統
  • 儲存在裝置的作業系統事件記錄中
  • 儲存在管理伺服器的作業系統事件記錄中
• 事件通知

  You can select if you want to be notified about the event in one of the following ways:

  • 透過郵件通知
  • 透過簡訊通知
  • 透過執行可執行檔或指令碼通知
  • 透過 SNMP 通知

  By default, the notification settings specified on the Administration Server properties tab (such as recipient address) are used. If you want, you can change these settings in the 電子郵件, SMS, and 要執行的可執行檔 tabs.

變更歷程

The 變更歷程 tab allows you to view the list of the policy revisions and roll back changes made to the policy, if necessary.

See also: Scenario: Configuring network protection

Page top