About the policy tool

On large networks with many systems, the policy tool can standardize the settings of enabled security checks, templates, and word lists. The policy tool exports policies from a selected manager, then imports the policies to the other managers on the network. The policies that you import enable the same security checks, and contain the same template and word list settings as the policies of the source manager.

The policy tool exports policies as XML formatted files. You can use a standard text editor to view the contents. Each element is tagged for identification. The file structure separates the modules in the policy and the checks in each module. The file also contains the policy version and edit level, enabled template entries, and name list types and values.

The policy file that you export by using the policy tool contains the security checks that are in the policy, whether enabled or disabled. However, the file contains only templates and the word lists that are enabled in the source policy.

The policy file that you import by using the policy tool overwrites the policy on the importing manager.