Software Secure Workload
Activity Configure

View, Compare, and Manage Enforced Policy Versions

Each time that you enforce or reenforce policies in a workspace after making changes, a new version (p*) is created.

For detailed information about versioning, see About Policy Versions (v* and p*).

Procedure

1

Click Defend > Segmentation.

2

Navigate to the relevant scope and primary workspace.

3

Click Manage Policies.

4

The currently displayed version of the policies is shown at the top of the page:

Currently displayed version of policies

The displayed version may be a policy discovery version, an analyzed policy version, or an enforced version.

5

Do one of the following:

To display a different version of the policies:

Click the current version and choose a different version.

For descriptions of the versions, see About Policy Versions (v* and p*).

Important! If you choose a v* version, see View, Compare, and Manage Discovered Policy Versions instead of this topic, including the important caveat at the end of the topic.

To view details about the analyzed versions:

  1. Click View Version History at the top of the page beside the current version.

  2. Click the Published Versions tab to see the versions of analyzed and enforced policies.

  3. To view log entries for a version, click the link in the version.

    Pale green rows represent analysis activity.

    Bright green rows represent enforcement activity.

To compare two versions to see what has changed:

  1. Click Compare Revisions.

  2. Choose the versions to compare.

    You can compare the latest draft version, analyzed and enforced versions.

  3. For result details, see Comparison of Policy Versions: Policy Diff.

To delete an unwanted version:

Click More button for the version and choose Delete.

Published policy versions (p* versions) can be deleted as long as the version is not being actively analyzed or enforced.

To export a version:

Click More button for the version and choose Export....

See also Export a Workspace.

What to do next

When you are done working with versions, change the version at the top of the workspace page to the latest discovered policy version (v*).

This avoids unintentional deletion of discovered policy versions and allows you to manually create policies in the workspace.