Make SEP policies "modular".........
Symantec needs to make POLICIES to be MODULAR. Allow us to share single pieces of a policy and not replace the WHOLE policy when we import.....
Right now, we have a firewall policy, but if I make a single change, say I add or change a rule, I can't share that with anyone else, NOR can I share that SINGLE change with another group HERE at work because it will overwrite the WHOLE policy, not simply ADD or MODIFY the one rule in that policy.
Same for the other policies - I've had folks send me exclusion policies, firewall policies, you name it, but I can't use them because then it overwrites the WHOLE policy. I'd like to see policies consist of LINE ITEMS that you can export or import!
Say you create a GREAT firewall policy and want to share it. I can't use it if I've got some very special rules in our policy here as your policy will totally overwrite MY policy, removing MY line items.............
Same for the shared exclusions. I had a friend send me his exclusions - I was not able to import his and ADD to our own, I had to delete or overwrite or replace our own policy, then go in and add back our specific needs.
It works the same for inheritance, etc. - if I have a group that uses policy A, then a group under it inherits policy A, then need to make a change that I don't want to be shared, I have to break inheritance. But say I want to share a change made in one group with another group, but NOT inherit the whole policy because another groups has some stricter needs, I can't do that. I must MANUALLY add each change I make to multiple groups, multiple policies. I might want ALL to block xxx.exe, except for one group that needs xxx.exe.
I must manually type that in, I can't import that single line item.
I should be able to:
export or import entire policies
export or import single items within any policy.