You can specify multiple
modules within a policy and limit the number of messages that each
run reports. You can also schedule multiple module or policy runs,
view the status of a policy run, stop a policy run, and delete a
You can run policies on
agents or on manager domains. Symantec Enterprise Security Manager
compares the current state of the host computers to the policy's
security standards. When the policy run completes, you can view the
resulting security data in the chart and grid views of the ESM
console. You can also display or print security reports, or export
the security data to a database for custom reporting.
You can do the following
with the policy runs:
Modify policy runs by specifying the modules and
checks that are used to assess your agent computers
Limit the number of messages or suppress specific
messages that a policy run generates
Schedule policy runs to run at set intervals
View the status of policy runs
Stop a policy run
Delete a policy run
To run a policy, you must
have the Run Policies access right enabled for domains and the Run
access right enabled for policies in the manager account.
To perform policy runs
Do one of the
Drag and drop a policy on an agent or domain.
To run only one module,
drag and drop the module on the agent or domain.
Drag and drop the selected agent or domain on the
Use the Policy Run wizard.
Right-click the policy and click Run on domain.
To run a policy on the
agents that are registered to a manager in a specified domain.
[an error occurred while processing this directive]