topic Re: temporary disable policy install ? in Firewall and Security Management

temporary disable policy install ?

Wolfgang — Tue, 18 Mar 2025 10:20:17 GMT

Is it possible to temporary disable policy install on a gateway ? We want to freeze the state for 3 days and none of the administrators should be able to install policy on one gateway.

Re: temporary disable policy install ?

Tal_Paz-Fridman — Tue, 18 Mar 2025 10:28:04 GMT

You can disable the permission to Install Policy from the Permission Profile.

If your Administrators currently have Superuser or Read/Write permissions, perhaps create Custom Permission Profile with all the relevant options and just remove the option to Install Policy for this time period.

Re: temporary disable policy install ?

emmap — Tue, 18 Mar 2025 10:52:50 GMT

On top of the permission stuff you can also remove the gateways from the install targets of the policy packages, to put some friction in there to remind administrators they're not to be installing them.

Re: temporary disable policy install ?

Wolfgang — Tue, 18 Mar 2025 11:57:34 GMT

@emmap sounds good to me. This is a simple solution and other administrators get a hint if they try to install policy.