topic Re: CSA Organization in Network Security

CSA Organization

eaglesecure — Sun, 10 Mar 2019 10:39:00 GMT

I am looking for some tips on how to best organize Policies, Rule Modules and Rules.

Specifically is it better to create more Policies, Rule Modules or Rules.

tsteger1 — Fri, 08 Jun 2007 18:28:10 GMT

Leave as much of the original configuration intact as you can and make new policies>modules>rules for your exceptions.

This will not only make it easier to manage, it will make upgrades much easier.

Upgrades will replace original configuration objects only if they have not changed.

The more that are replaced by an upgrade, the less you have to do manually.

Having all exceptions in a single policy or policies should allow you to manage them more efficiently too.

pmccubbin — Sun, 10 Jun 2007 11:34:17 GMT

Tom,

In a nut shell this is great advice. I give it a 5 rating. Keep up the good work and thanks for all your responses on this topic.

Paul

tsteger1 — Mon, 11 Jun 2007 20:16:53 GMT

Thank you Paul, I appreciate that.

Tom

eaglesecure — Tue, 12 Jun 2007 11:44:49 GMT

Thanks, this information will be very useful when upgrading in the future.

tsteger1 — Tue, 12 Jun 2007 22:44:37 GMT

Glad to be of service. Good luck with it.

Tom