topic Re: CSA Groups in Network Security

CSA Groups

kerraj2004 — Sun, 10 Mar 2019 10:41:12 GMT

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?

Thanks,

Re: CSA Groups

tsteger1 — Sat, 07 Jul 2007 21:12:50 GMT

I use the default groups and policies and make exceptions separately. This makes upgrades and tracking changes easier since they are all in one place.

I used to clone everything and make changes directly to the clones but it made upgrades very tedious.

Tom

Re: CSA Groups

kerraj2004 — Mon, 09 Jul 2007 11:36:53 GMT

Tom, thanks for your response regarding both of my postings.

Re: CSA Groups

TradeSecrets — Tue, 10 Jul 2007 19:31:23 GMT

Hi Kerra,

The best thing to do it have clone the ploicy if you want to add protection and have another for exceptions.

So policy A is the protection, Group B is the exception. Finally Policy C for additional protection.

This is nice, you can use the compare feature and compare A + C and see the changes you or people made.

Modifying the original polices is bad practice and make it much harder for someone to help you if you get into a jam or change employee's