Centralized policy

Policies and objects are managed by means of packages that can be global or local to an ADOM (administrative domain). A policy package contains a set of security rules deployed on a unique device or a group of devices. An ADOM may contain several policy packages that can be deployed on one or more devices or VDOMs.

All objects that compose the rules (addresses, time ranges, interfaces, services, and so on) can be defined with static or dynamic values when they change for each device. The association of a policy package to a device or VDOM is performed after the creation of the policy package from the Policy & Objects module and the Installation tab.