Deploying Policies

After you define the roles, data elements, data stores, and permissions for the policy, the policy is ready for deployment.

Following are the steps to deploy the policy:

  • The policy should be made ready for deployment.
  • Deploy the policy.

Preparing the Policy for Deployment

This section describes the steps to prepare the policy ready for deployment.

If all the parameters are valid, then the policy is set to the Ready to Deploy state.

To make the policy ready for deployment:

  1. On the ESA Web UI, navigate to Policy Management > Policies & Trusted Applications > Policies.

    The list of all the policies appear.

  2. Select the required policy.

    The screen to edit the policy appears.

  3. Click Ready to Deploy.

A message confirming the deployment appears. The Ready to Deploy is inactive and the Deploy is active. The ESA must be up and running to deploy the package to the protectors.

Note:

  • When the ESA is offline and the Protector, Resilient Package Proxy (RPP), or the Resilient Package Agent (RPA) is switched off and then switched on: The Protector, RPP, or RPA fail to download the package from the ESA after it is turned on. This download activity continues until the Protector, RPP, or RPA successfully downloads the package.
  • When the Protector, RPP, or RPA is running and then the ESA goes offline: The Protector, RPP, or RPA will continue to ping back the ESA, once every minute, to get the latest package. If there is no response from the ESA, then the Protector, RPP, or RPA sends a log to inform that it failed to download or check for any possible updates to the package. The package is kept published and the protect operation continues. If the RPP is not installed on the ESA, then the RPP provides the cached package to the Protector. Similarly, the RPA provides the downloaded package from the shared memory to the Protector.

Deploying the Policy

This section describes the steps how to deploy the policy after it has been prepared for deployment.

To deploy the policy:

  1. On the ESA Web UI, navigate to Policy Management > Policies & Trusted Applications > Policies.

    The list of all the policies appear.

  2. Select the required policy.

    The screen to edit the policy appears.

  3. Click Deploy.

A message Policy has been deployed successfully appears.

Note: Redeploy the policy only when there are changes to an existing policy.

If you deploy a policy to a data store, which contains additional policies that have already been deployed, then the policy user inherits the permissions from the multiple policies.

For more information about inherting permissions, refer to Inheriting Permissions for Users in Multiple Policies and Roles.

Last modified February 7, 2025