Cisco Security Agent

CSA Policies

Policies are combinations of rule modules that serve a specific purpose. You might, for example, create a policy to control network access allowed by workstations in your environment. This policy could include multiple rule modules designed for specific operating systems and functional controls. When you combine the rule modules into a policy, you can apply the policy to groups and deploy them to active agent systems. Policies follow the same precedence rules described earlier in the section “Rule Precedence and Manipulation” because the rules from various modules are combined into a single policy. It is important that you review the precedence rules and understand how policy is combined and the resulting rule sets are implemented ...