System information

Comodo Endpoint Security Manager - SME - Administrator Guide

Exception - if the policy is 'Locally Configured' then remote mode have no effect (see below).

• Local Mode - An endpoint that is locally managed effectively takes the machine 'offline' so ESM will not

automatically re-apply assigned policy if an endpoint falls out of compliance. This allows administrators to

change a policy at the local machine without having ESM constantly re-apply the 'old' policy in the

background. Once policy specification is complete, the admin can return to the console, import the new

policy and deploy it to target machines. The source machine can then, optionally, be returned to remote

mode.

• Policy, as mentioned earlier, refers to the actual security configuration of CIS. An endpoint can have any chosen

policy and can be in either 'Remote' or 'Local' mode.

• 'Locally Configured' policy. 'Locally Configured' policy means that CIS settings can be managed by the local user and

policy compliance will not be enforced by ESM. Machines or groups with this policy will always report compliance

status of 'OK'. Changes made to the CIS settings on to the machine with 'Locally Configured' policy are dynamically

stored in the policy. If a machine is switched back to 'Locally Configured' policy from an applied security policy, the last

stored local CIS configuration settings will be restored to it.

2.4.1. Viewing Policies

The 'View All Policies' interface enables the administrator to:

• View a list of all policies along with their descriptions and the CIS component covered by the policy

• View and modify the details of any policy - including name, description, CIS components, target computers and

whether the policy should allow local configuration

• Configure various settings such as Antivirus settings, Firewall settings, Defense+ settings, General CIS settings and

Agent settings of any policy

• Add or remove policies as per requirements

• Export any policy to .xml file

To open the interface, click the 'view' tile from the 'policies' interface:

The 'View All Policies' interface will open with the default view being a list of all policies: