New Global Assignment

What can I do here?

Use this window to configure a new Global assignment.

Global Assignments

A global assignment is a Multi-Domain Security Management system object that assigns a global configuration to one specified Domain. You create global assignments to assign different combinations of Global Access Control Policies, Global Threat Prevention Policies, and global object definitions to different Domains.

When you create a new global assignment, it automatically assigns the specified global configuration to the specified Domain. It also publishes the assignment and updates local Domain Policies.

Best Practice - When you create a new Domain, create a global assignment for that Domain at the same time.

When you do one or more of these actions, you must publish the Global Domain session and reassign the global configuration:

• Add, delete, or change rules in a global configuration
• Add, delete, or change user-defined objects in a global configuration
• Define the SmartEvent object in the global database
• Change the definition of a global assignment

The assign/reassign action does not automatically install Policies.

Best Practice - Install Policies after you assign or reassign a global assignment.

New Global Assignment

Settings and Parameters:

Global Domain Assignment

• Global Domain - Select a Global Domain from the list.
• Domain - Select a Domain to assign to the Global Domain.

Access Control

• Global Access Policy - Select an Access Control Policy for this assignment.

Threat Prevention

• Global Threat Prevention Policy - Select a Threat Prevention Policy for this assignment.
• Manage protection actions - Selecting this options aligns the IPS version of the local domain with the IPS version of the Global domain. Protection activations on the Global domain are applied to local domain activations - except for those deliberately overridden.

  Note - If the local domain has a higher IPS version than the global domain, the assignment operation fails. To resolve, run IPS update on the global domain and try again.