Exclude a policyset from Compliance Blade

[Soren_Kristense]

Hi

Is it possible to exclude a policy set from the compliance blade, it is the default VSX cluster policy set I want to exclude from compliance blade.

[PhoneBoy]

Do you want to exclude the policy installed to VS0?

You would add VS0 here:

[Soren_Kristense]

Yes i did exclude VS0, but the policy set for VS0 is still listed in the URL filtering rules and Application Control rules.

[PhoneBoy]

Will look into this.

Tomer Sole‌ any thoughts?

[PhoneBoy]

You have to disable the relevant Best Practices for VS0.

Find the appropriate Best Practices and uncheck the VS0 object.

An example from Demo Mode (admittedly not using VSX objects, but same concept applies).

[Soren_Kristense]

It is the policy set that is testet, and not the gateway where it is installed on.

[PhoneBoy]

Can't you just uncheck all the gateways where this option is irrelevant?

[Soren_Kristense]

The option is not connected to ag Gateway only to a Rulebase

[BAlexiev]

Hi! I had the same question about excluding a policy. After adding a SG to Inactive Gateways in the Inactive Objects menu (button), all the requirements will not be checked against this gateway, so the Compliance results will change to include only the applicable policy/policies for the gateways that are active.

I suppose it is good that we still have the requirements listed for the other policies and their rules, so we can prepare a policy and have it checked before we apply it to a SG.