Policy sharing is a way to transfer policies between ePO servers. When you share policies, it allows you to manage policies on one server, and use them on many other servers all through the ePO console.
NOTES:
- Shared policies are automatically pushed to ePO servers with policy sharing enabled. When you click Share in the Policy Catalog, the policy is immediately pushed to all registered ePO servers that have policy sharing enabled.
- Changes to shared policies are similarly pushed.
- If you need to modify the policy after it has been shared, edit the policy and run the shared policies task again. As a best practice, inform local administrators of the change.
- You can edit a shared policy only in the primary server. In all other servers, it's read-only.
- If you click unshare on the primary server, it automatically deletes the policy from the other servers.
- When a remote server doesn't have the needed extensions installed, the push fails.
- Policies must be configured or have content. A policy requires manual entry of values, for example:
- File path
- MBR Hash
- BIOS Hash
The policy is shared, but appears as an unconfigured policy on the registered ePO servers, with no ownership or configuration.
To enable policy sharing, complete the following tasks in the following sequence:
- Register servers for policy sharing. To transfer a policy from ePO A to ePO B:
- Log on to the console of ePO A.
- Click Menu, Configuration, Registered Server.
- Click New server.
- Add information for ePO B.
- Click Enable for the Policy sharing entry. This action enables the sharing of product policies across servers.
- Click Save.
- Designate policies for sharing:
- On ePO A, click Menu, Policy, Policy Catalog.
- Click the Product drop-down list.
- Select a product policy you want to share. For example, VirusScan Enterprise 8.8.0.
- Under the Actions column for the My Default entry, click Share.
- Under the Actions column for the same entry, click Edit Settings.
- Change to the policy, and click Save.
- Schedule server tasks to share policies:
- On ePO A, click Menu, Automation, Server Tasks.
- Locate the task named Synchronize Shared Policies.
- Under the Actions column, click Run.
- Click the Synchronize Shared Policies task in the Server Task Log.
- Verify that the following is in the log:
Policies that were successfully shared Count: (#) ...
NOTE: This message validates that the shared policies were synchronized across servers.
- Click Close.
- Verify the policy migrated successfully to the ePO B server:
- Log on to the console of ePO B.
- Click Menu, Policy, Policy Catalog.
- Click the Product drop-down list.
- Select the product policy you selected to share in step 2c. For example, VirusScan Enterprise 8.8.0.
- Locate the shared policy from ePO A.
NOTE: The shared policy is identifiable by the first server name listed in the Owner column.
- Click View under the Actions column to review the shared policy.
- Review the settings.
