topic Re: Legacy Policy 2 Unified Access Policy in SASE and Remote Access

Legacy Policy 2 Unified Access Policy

Olle — Tue, 14 Apr 2020 14:03:28 GMT

Hi all

I want to switch to Unified Access Policy from Legacy Policy but I have people using it much of the time.

So any tips on changing without stopping users from login in?

Any one have some step by step guide

Do I need to build the same rules and object in the new policy?

We run management 80.40 and SG 5800 with 80.30

Regards

Olle

Re: Legacy Policy 2 Unified Access Policy

PhoneBoy — Tue, 14 Apr 2020 22:38:05 GMT

Best to clone your existing policy package, then you can make whatever changes are needed to unify the policy.

Screen Shot 2020-04-14 at 3.34.42 PM.png

As every policy is quite different, it's difficult to suggest best practices that apply to everyone.

Re: Legacy Policy 2 Unified Access Policy

Olle — Wed, 15 Apr 2020 17:36:11 GMT

Thanks

So I build a new rulebase in the new GUI, will the old rules in the old GUI have any influence on traffic?

Regards

Olle

Re: Legacy Policy 2 Unified Access Policy

PhoneBoy — Wed, 15 Apr 2020 19:39:25 GMT

In general, a policy install is required for a new policy to take effect on the gateway.
All you'd be doing is cloning the policy to a new policy package and working on that new policy.
Provided you don't install that policy before you're ready, it will have zero impact on the gateway.

Note that changes made to objects that exist in both policies will ultimately impact both policies.

Re: Legacy Policy 2 Unified Access Policy

Olle — Mon, 27 Apr 2020 22:29:17 GMT

Hi
If I change to Access Policy and don’t change any objects can I change back to Legacy Policy without problems?

Regards
Olle

Re: Legacy Policy 2 Unified Access Policy

PhoneBoy — Tue, 28 Apr 2020 00:46:48 GMT

Even if you change the existing objects, they should apply in both policies as both sets of objects come from the same place.
As far as I know, you can switch between the two policy methods (Legacy and Unified) but that requires a policy install to take effect.