Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Promoting to Group Policy

If your policy type is a device policy, then you can promote the policy to a group policy.

To promote a device policy to a group policy:

  1. Select Configure > Firewall Policy.

    The Policies page is displayed.

  2. Select a policy, right-click the policy or select Promote to Group Policy from the More list.

    The Promote to Group Policy page is displayed.

    Note:

    The Promote to Group Policy option is enabled only when the policy type is device policy.

  3. Enter the parameters according to the guidelines in Table 1.
  4. Click OK.

    The policy is promoted from device policy to group policy.

Table 1: Promoting a device policy to a group policy

Field

Description

General Information

Name

Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. Maximum length is 255 characters.

Description

Enter a description for the group policy rules; maximum length is 255 characters. Comments entered in this field are sent to the device.

Policy Options

Profile

Select a profile for the policy:

  • Log Session Init—Record entries for session start events. A traffic log that records session start events does not include bytes sent and received or session duration. You can use the log to verify when the session was initially created.

  • Log Session Close—Record entries for session close events. A traffic log that records session close information also lists a reason for the end of the session.

  • All Logging Enabled—Logs are created for both session initiation and session closing. Logs can be used for troubleshooting.

  • All Logging Disabled—Logs are not recorded for both session initiation and session closing.

Policy Sequence

Placement

This is applicable for Group Policy only. Select Before device-specific policies or After device-specific policies. This decides the policy order when the devices policy configuration information is updated on the devices.

Sequence No.

This is applicable for Group Policy only. Select this option to specify the order number for the policy. Policy lookup is performed in the order that the policies are configured. The first policy that matches the traffic is used. For more information, see Policy Ordering Overview.