Deployment - Additional Notes
This help page provides additional user guidance relating to policy deployment actions.
Saving without Deploying
A Linux endpoint can have only one policy deployed (active) at any given time. The active policy includes, by default, the latest policy defaults and local allowlisting specified.
-
Whilst defining a new policy you can perform intermediate Save operations to ensure your work is not lost.
Note that once your policy is deployed it is not possible to edit it further (though it can be duplicated and the resulting copy is editable). -
Active policies can be viewed or duplicated after deployment.
-
Any policy deployed successfully on an endpoint replaces the previous one as the active policy.
Deployments to Groups
Device Groups are a way of organizing the devices registered in your system into logical groups applicable to your business. Grouping allows for easier handling and maintenance.
-
A device cannot be present multiple times or included in different logical groups.
-
Groups cannot be further nested or otherwise classified.
-
When adding a Device Group as a deployment target into a policy, the system will add a list of all the devices in it, ensuring they are uniquely inserted into the policy.
-
Within the web console, when creating or editing Device Groups, the system displays only the groups permitted for insertion, this means that groups containing any devices that you have previously added are not listed as available for selection.
Managing Deployed Policy Versions
Following successful deployment, policies can only be viewed, duplicated, or removed.
Note that removing a deployed policy will not remove it or inactivate it from the endpoints where it was active – such a policy can only be replaced later via a new deployment.
To create a new version of an existing, successfully deployed policy, you must use the Duplicate action to create a new draft, and then Edit the new draft.
-
Duplicate will copy the main properties of the policy, the complete list of rules, and the complete list of added devices.
-
Manually including a version number in the name of your policy is recommended.
Related Topics:
Installation (opens UWM Help)