Performing tasks that are common to all security policies

Article:HOWTO55049  |  Created: 2011-06-29  |  Updated: 2011-12-16  |  Article URL http://www.symantec.com/docs/HOWTO55049
Article Type
How To


Subject


Performing tasks that are common to all security policies

You can manage your Symantec Endpoint Protection security policies in many ways. For example, you can create copies of the security policies and then customize the copies for your specific needs. You can lock and unlock certain settings so that users cannot change them on the client computer. Table: Tasks common to all policies describes many of the policy tasks that you can perform.

Table: Tasks common to all policies

Task

Description

Add a policy

If you do not want to use one of the default policies, you can add a new policy.

You can add shared policies or non-shared policies.

Note:

If you add or edit shared policies in the Policies page, you must also assign the policies to a group or location. Otherwise those policies are not effective.

See About shared and non-shared policies.

See Adding a policy.

Lock and unlock policy settings

You can lock and unlock some Virus and Spyware Protection policy settings. Computer users cannot change locked policy settings. A padlock icon appears next to a lockable policy setting.

See Locking and unlocking policy settings.

Edit a policy

If you want to change the settings in an existing policy, you can edit it. You can increase or decrease the protection on your computers by modifying its security policies. You do not have to reassign a modified policy unless you change the group assignment.

See Editing a policy.

Assign a policy

To put a policy into use, you must assign it to one or more groups or locations.

See Assigning a policy to a group.

Test a policy

Symantec recommends that you always test a new policy before you use it in a production environment.

See Testing a security policy.

Update the policies on clients

Based on the available bandwidth, you can configure a client to use Push mode or Pull mode as its policy update method.

See How the client computers get policy updates.

See Configuring push mode or pull mode to update client policies and content.

Replace a policy

You can replace a shared policy with another shared policy. You can replace the shared policy in either all locations or for one location.

See Replacing a policy.

Copy and paste a policy

Instead of adding a new policy, you may want to copy an existing policy to use as the basis for the new policy.

You can copy and paste policies on either the Policies page or the Policies tab on the Clients page.

Note:

You can also copy all the policies in a group and paste them into another group, from the Policies tab on the Clients page.

See Copying and pasting a policy on the Clients page.

See Copying and pasting a policy on the Policies page.

Convert a shared policy to a non-shared policy

You can copy the content of a shared policy and create a non-shared policy from that content.

See About shared and non-shared policies.

A copy enables you to change the content of a shared policy in one location and not in all other locations. The copy overrides the existing non-shared policy.

You can convert a shared policy to a non-shared policy if the policy no longer applies to all the groups or all the locations. When you finish the conversion, the converted policy with its new name appears under Location-specific Policies and Settings.

See Converting a shared policy to a non-shared policy .

Export and import a policy

You can export an existing policy if you want to use at a different site. You can then import the policy and apply it to a group or to a specific location.

See Exporting and importing policies.

Withdraw a policy

If you delete a policy, Symantec Endpoint Protection removes the policy from the database. If you do not want to delete a policy, but you no longer want to use it, you can withdraw the policy instead.

You can withdraw any type of policy except a Virus and Spyware Protection policy and a LiveUpdate Settings policy.

See Withdrawing a policy.

Delete a policy

If a policy is no longer useful, and you do not want to keep it in the database, you can delete it.

See Deleting a policy permanently.


Legacy ID



v15703889_v59371754


Article URL http://www.symantec.com/docs/HOWTO55049


Terms of use for this information are found in Legal Notices