Cisco Systems CL-28826-01 Copying Policies Between Devices

5-31

User Guide for Cisco Security Manager 4.4

OL-28826-01

Chapter5 Managing Policies

Managing Policies in Device View and the Site-to-Site VPN Manager

your organization, and you can select different methods for each device. For general information

about deployment, see Working with Deployment and the Configuration Archive, page 8-26. For the

specific steps based on workflow mode, and information on the deployment methods, see the

following topics:

–

Deploying Configurations in Non-Workflow Mode, page 8-29

–

Deploying Configurations in Workflow Mode, page 8-35

–

Deploying Configurations Using an Auto Update Server or CNS Configuration Engine,

page 8-42

–

Deploying Configurations to a Token Management Server, page 8-43

–

Deploying Directly to a Device, page 8-9

–

Deploying to a Device through an Intermediate Server, page 8-10

–

Deploying to a File, page 8-11

Copying Policies Between Devices

You can streamline device configuration by copying multiple policies, or even a complete set of policies,

from one device to other devices that support the selected policies. This makes it easy, for example, to

quickly configure a new firewall device with the same policies configured on an existing firewall device.

When you copy policies between devices, those policies that are local on the source device are copied

locally to the target device. Shared policies assigned to the source device are copied as shared policies

to the target device as well.

Tips

•If your intention is to assign a single shared policy to additional devices, we recommend that you

use the assignment feature, rather than copying the policies. For more information about sharing

policies in Device view, see Modifying Shared Policy Assignments in Device View or the

Site-to-Site VPN Manager, page 5-46.

•To create a new device of the same type that shares the same configuration and properties (including

the operating system version, credentials, and grouping attributes) as the source device, use the

Clone Device feature. For more information, see Cloning a Device, page 3-54.