7-27
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 7 Managing FlexConfigs
Configuring FlexConfig Policies and Policy Objects
gateway 10.10.10.116 102
command-queue 150
exit
policy-map inbound_policy
class sj_mgcp_class
inspect mgcp inbound_mgcp
exit
exit
service-policy inbound_policy interface outside
Step 6 If you have additional ASA devices that require MGCP, you can share this policy with them by doing
the following:
a. Right-click FlexConfigs in the Policy selector and select Share Policy.
The Share Policy dialog box appears.
b. Enter a name for the policy and click OK. For this example, enter MyShared_ASA_MGCP.
The banner above the FlexConfigs policy now shows that the device is using a shared policy and
displays the name of the policy.
c. In the FlexConfigs banner, click the link in the Assigned To field. In this example, the link should
be labeled 1 Device, which indicates that this shared policy is assigned to one device (the device you
are viewing).
Clicking the link opens the Shared Policy Assignments dialog box. Using this dialog box, you can
select the other devices that should use this policy in the Available Devices list, and click >> to add
them to the list of devices that are assigned the policy.
d. Click OK. The Shared Policy Assignments dialog box closes, and the additional devices you
selected are configured to use the shared policy. The link in the banner changes to indicate the
number of devices that now use this policy (in this example, 2 Devices).
Tip You can also share policies from Policy view. Select View > Policy View, select FlexConfigs in
the policy type selector, select the MyShared_ASA_MGCP policy, click the Assignments tab,
select the devices to which you want to assign the policy, click>>, and then Save.
Step 7 Submit your changes and deploy the configurations to the devices. For information about deploying
configurations, see Working with Deployment and the Configuration Archive, page 8-26.
Creating FlexConfig Policy Objects
You can create FlexConfig policy objects to configure features on devices that are not supported by
Security Manager. For more information about FlexConfig objects, see Understanding FlexConfig
Policies and Policy Objects, page 7-2.
Tip You can also create FlexConfig policy objects when defining policies or objects that use this object type.
For more information, see Selecting Objects for Policies, page 6-2.