Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSA Groups

Is it best to use the default Groups in the CSAMC such as desktop, laptops and servers instead of cloning them and then using the group? What is the best practice or advice?

Thanks,

3 REPLIES
Blue

Re: CSA Groups

I use the default groups and policies and make exceptions separately. This makes upgrades and tracking changes easier since they are all in one place.

I used to clone everything and make changes directly to the clones but it made upgrades very tedious.

Tom

New Member

Re: CSA Groups

Tom, thanks for your response regarding both of my postings.

New Member

Re: CSA Groups

Hi Kerra,

The best thing to do it have clone the ploicy if you want to add protection and have another for exceptions.

So policy A is the protection, Group B is the exception. Finally Policy C for additional protection.

This is nice, you can use the compare feature and compare A + C and see the changes you or people made.

Modifying the original polices is bad practice and make it much harder for someone to help you if you get into a jam or change employee's

99
Views
8
Helpful
3
Replies