Policies specify the settings, the authorizations, or the permissions that network resources must have to comply with your company policy. Symantec ESM compares the current state of each assessed computer to standards that are defined in the policy, and reports each discrepancy with its severity score.
You can run policies on a single agent or on all agents in a manager domain.
More Information