You can assign more than one Agent Policy to a Realm. (See Agent Policies.) You can also assign more than one Endpoint Update Policy to a Realm. (See Endpoint Update Policies.) For both Agent Policies and Endpoint Update Policies, when you have multiple policies per Realm, you can set the priority order in which the policies will be applied.
Policy priority order is set from low to high and the higher policy always inherits the settings from the lower policy.
In the example, boston-office-privileged-accounts has higher priority than boston-office-employee.
Inheriting means that when you set up a policy, you define settings that are specific to that policy. Any settings that you do not define are inherited from the policy directly below it. All of the settings for tenant-acme-01-default-policy are the same as the Default Account Policy except for File Activity Monitoring. File Activity Monitoring was turned off in the tenant-acme-01-default-policy when the policy was added.
Setting the Policy Priority
-
From the Proofpoint Information and Cloud Security Platform, select the Administration app. Select Endpoints > Realms.
-
Select the Realm and select Policy Priorities tab in the details area.
-
You can set Agent Policy and Endpoint Update Policy priority from this tab.
-
Priorities are set from low to high. You can change the Agent Policy priority order by selecting Move Up, Move to Top, Move Down or Remove.
Related Topics: