Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CSA Organization

I am looking for some tips on how to best organize Policies, Rule Modules and Rules.

Specifically is it better to create more Policies, Rule Modules or Rules.

1 ACCEPTED SOLUTION

Accepted Solutions
Blue

Re: CSA Organization

Leave as much of the original configuration intact as you can and make new policies>modules>rules for your exceptions.

This will not only make it easier to manage, it will make upgrades much easier.

Upgrades will replace original configuration objects only if they have not changed.

The more that are replaced by an upgrade, the less you have to do manually.

Having all exceptions in a single policy or policies should allow you to manage them more efficiently too.

5 REPLIES
Blue

Re: CSA Organization

Leave as much of the original configuration intact as you can and make new policies>modules>rules for your exceptions.

This will not only make it easier to manage, it will make upgrades much easier.

Upgrades will replace original configuration objects only if they have not changed.

The more that are replaced by an upgrade, the less you have to do manually.

Having all exceptions in a single policy or policies should allow you to manage them more efficiently too.

Silver

Re: CSA Organization

Tom,

In a nut shell this is great advice. I give it a 5 rating. Keep up the good work and thanks for all your responses on this topic.

Paul

Blue

Re: CSA Organization

Thank you Paul, I appreciate that.

Tom

New Member

Re: CSA Organization

Thanks, this information will be very useful when upgrading in the future.

Blue

Re: CSA Organization

Glad to be of service. Good luck with it.

Tom

254
Views
5
Helpful
5
Replies