Greetings,
Existing configuration: We have several clusters in our network (R82 JHF10 & JHF44). Two of them have Autonomous Threat Prevention activated. We currently use one standard policy package that includes all gateways for both Access Control and Threat Prevention.
We recently installed a new cluster (R82 JHF44) to replace one of the clusters that did not have Threat Prevention activated. Management now wants to enable Autonomous Threat Prevention for the internal network on the newly installed one.
My plan is as follows:
Edit the existing policy package and change the policy target to include all gateways except the new one.
Create a new policy package specifically for the new gateway.
Activate Autonomous Threat Prevention on the new gateway.
Under Threat Prevention → Autonomous Policy, select the Internal Network profile and assign it to the new gateway.
Install the policy.
Question: Will this approach work as expected, or I should check things before?
Regards,