This option allows you to automate Firewall Rule Objects deployments to applicable Sensors when there are any changes made in the Firewall Rule Objects. These changes include addition, deletion or modification of IPv4 and IPv6 addresses and CIDRs.
Automatic deployment of Firewall Rule Objects is disabled by default. To enable automatic deployment:
Select Devices → <Admin Domain Name> → Global → IPS Device Settings → Firewall Rule Objects.
Firewall Rule Objects Deployment page appears. Select the Deploy changes in Firewall Rule Objects automatically in real time checkbox to enable automatic Firewall Rule Objects deployment to applicable Sensors in real-time.
Note
This is a global setting across the Manager which is applicable to all the domains.
Note
Automatic deployments are applicable only if the rule object being modified is of the following type: IPv4 Endpoint, IPv4 Network, IPv6 Endpoint, or IPv6 Network.
Note
Automatic deployments are applicable only if the rule object being modified is used in a Firewall policy and assigned to a Sensor running on software version which is later than 10.1.5.153.
Enable automatic deployment of Firewall rule objects.jpg "GUID-24697BE9-8E3E-4FF8-8B49-B49923052FA6-low.jpg")