topic Re: Install multiple policies R80.40 in Firewall and Security Management

Install multiple policies R80.40

JaySon_2021 — Wed, 25 Aug 2021 13:59:26 GMT

If I have say 4 firewalls managed by an R80.40 manager and I have 5 policies. 1 each for the individual firewalls where a single firewall is the policy target (ie: policyA target is fw1, policyB target is fw2, etc). Then I have another policy that installs to ALL gateways. Will pushing policyA to fw1, and then I push the policy that installs to ALL gateways, will it overwrite the policyA on fw1?

Re: Install multiple policies R80.40

G_W_Albrecht — Wed, 25 Aug 2021 15:12:14 GMT

If you change the policy package that gets installed the new policy will replace the old policy, of course !

Re: Install multiple policies R80.40

JaySon_2021 — Wed, 25 Aug 2021 15:17:47 GMT

Thanks. What if I had just Acesss control in policyA and then only Threat in the policy that gets installed to ALL firewalls. Would those layers merge on FW1?

Re: Install multiple policies R80.40

PhoneBoy — Wed, 25 Aug 2021 15:53:20 GMT

It's certainly possible to have a shared Threat Prevention layer that is included in each policy package.
The restriction about what gateway gets what policy is done at the policy package level.
That impacts both the Access Control and Threat Prevention policy install process.

Which effectively means: you will have to perform an explicit policy install for each gateway to update the Threat Prevention policy across all your gateways, even if the policy layer is identical across all your policy packages.