commit simultaneously on various policy packages

[alexc88]

Hi, is there a way to deploy the changes you do on an object simultaneously on all policy package where the object is involved? Every time I need to modify an object that's involved in about 30 policy packages I have to open the single policy package and install, it would be glad to push in one single command or single operation this kind of change.

Thanks for your help

[Sarm_Chanatip]

That's interesting, I'm really curious as well.

[Tal_Paz-Fridman]

You can use Layers (Ordered or Inline). If the Layer is part of the Policy Package, any change you preform on it will be applied across all Policy Packages.

Please refer to Security Management R80.30 Administration Guide > Creating an Access Control Policy > Ordered Layers and Inline Layers

[alexc88]

But layers are available only on 80.10? Because we have 77.30

[Timothy_Hall]

In R80.20+ MDS/Provider-1 you can automate and/or schedule mass installation of policies using the "Policy Presets" feature.

[Maarten_Sjouw]

And on top of that you can also install policies directly from the MDS view, right click on the domain and select install policy.

[alexc88]

but is a solution also for R77.30?

[Maarten_Sjouw]

Nope, As @Timothy_Hall said only R80.20+

[Timothy_Hall · Accepted solution]

For R77.30 you could write a shell script for execution from the CLI on your SMS, and run it whenever you have made an object change in the SmartConsole (and done a Save) that you want to propagate to all gateways.  Note that gateway and policy names are case-sensitive...

#!/bin/bash

fwm load Policy_1_Name Gateway1_Name

fwm load Policy_2_Name Gateway2_Name

etc...

[PhoneBoy]

You pretty much have to do the same thing in R80.x as well, even if you use Policy Layers (though the exact command is different).