Performing tasks that are common to all security policies
|Article:HOWTO55049|||||Created: 2011-06-29|||||Updated: 2011-12-16|||||Article URL http://www.symantec.com/docs/HOWTO55049|
You can manage your Symantec Endpoint Protection security policies in many ways. For example, you can create copies of the security policies and then customize the copies for your specific needs. You can lock and unlock certain settings so that users cannot change them on the client computer. Table: Tasks common to all policies describes many of the policy tasks that you can perform.
Table: Tasks common to all policies
Add a policy
If you do not want to use one of the default policies, you can add a new policy.
You can add shared policies or non-shared policies.
See Adding a policy.
Lock and unlock policy settings
You can lock and unlock some Virus and Spyware Protection policy settings. Computer users cannot change locked policy settings. A padlock icon appears next to a lockable policy setting.
Edit a policy
If you want to change the settings in an existing policy, you can edit it. You can increase or decrease the protection on your computers by modifying its security policies. You do not have to reassign a modified policy unless you change the group assignment.
See Editing a policy.
Assign a policy
To put a policy into use, you must assign it to one or more groups or locations.
Test a policy
Symantec recommends that you always test a new policy before you use it in a production environment.
Update the policies on clients
Based on the available bandwidth, you can configure a client to use Push mode or Pull mode as its policy update method.
Replace a policy
You can replace a shared policy with another shared policy. You can replace the shared policy in either all locations or for one location.
See Replacing a policy.
Copy and paste a policy
Instead of adding a new policy, you may want to copy an existing policy to use as the basis for the new policy.
You can copy and paste policies on either the Policies page or the Policies tab on the Clients page.
Convert a shared policy to a non-shared policy
You can copy the content of a shared policy and create a non-shared policy from that content.
A copy enables you to change the content of a shared policy in one location and not in all other locations. The copy overrides the existing non-shared policy.
You can convert a shared policy to a non-shared policy if the policy no longer applies to all the groups or all the locations. When you finish the conversion, the converted policy with its new name appears under Location-specific Policies and Settings.
Export and import a policy
You can export an existing policy if you want to use at a different site. You can then import the policy and apply it to a group or to a specific location.
Withdraw a policy
If you delete a policy, Symantec Endpoint Protection removes the policy from the database. If you do not want to delete a policy, but you no longer want to use it, you can withdraw the policy instead.
You can withdraw any type of policy except a Virus and Spyware Protection policy and a LiveUpdate Settings policy.
See Withdrawing a policy.
Delete a policy
If a policy is no longer useful, and you do not want to keep it in the database, you can delete it.
Article URL http://www.symantec.com/docs/HOWTO55049