Configuration difference against root policy

Dear community,

 

is there a possibility to report configuration differences against root policy?

For example we have  set no scan exclusion on root policy. However on some policies below we have set exclusions. Is there a possibility to report these changes?

 

Thank you in advance!

Accepted Answer

Comments

  • MJ-perCompMJ-perComp Posts: 1,101 Superuser

    It is a very good idea to run such "inheritance reports regularly and in the result keep it small.

    The changes you did on ROOT should always only be minimal (PMS-Communication) and not involve specific settings on exclusions. All these should be done in a subdomain (e.g. "Workstations").

     

    As a general rule of thumb: Exlusions are only a temporary fix. Any installation that does not work propperly without an exclusion is considered a bug and should be reported to F-Secure Support for fixing.

    (see earlier discusions on that topic)

     

    M.

This discussion has been closed.