F-SECURE POLICY MANAGER 9.0 Administrator's Manual page 51

Combining these strategies achieves the best of both worlds. Some products could inherit their policies from
large domains, while other products could inherit their policies from subdomains or even get host-specific
policies.
If policy changes are implemented at multiple levels of the policy domain hierarchy, tracking changes can
become a challenging task. One convenient way is to use the
changes have been made to one specific policy setting.
If the subdomain or host values need to be reset to the current domain values, the
can be used to clean the sub-domain and host values.
Tip: You can also use the
settings have been overridden.
Index inheritance in tables
When you clear a row in a table using the
on the types of default rows defined in the parent domains and in MIB as default rows.
• If a row exists that has the same index values as the cleared row, it will be re-inherited.
• If a row that has the same index values as the cleared row does not exist, the emptied row will remain
empty after the Clear row operation.
Note: The row can be inherited from a parent domain, or from a MIB (a definition of the settings and
containing the default values for all settings) as a default row. The MIB can be considered a "domain
above the root domain" in relation to leaf value or row inheritance. MIB defaults are inherited to subdomains
unless overridden at a domain level. To override an inherited row, define a row with the same index
column values. MIB defaults are obtained based on the product version installed on hosts. For a domain,
the values from the newest product version are used.
Certain F-Secure products override the default table implementation, and as such they do not implement the
normal table inheritance as stated above.
For example, the following tables use their own mechanism without basic table inheritance:
• Internet Shield Rules
• Internet Shield Services
• Internet Shield Security levels
Please refer to the corresponding product manuals for more information about table behavior in these cases.
Note: Inherited and locally derived rows can be distinguished by color: inherited rows are gray and
locally derived rows are black.
Reporting tool to create
Clear row
table
table
table
F-Secure Policy Manager | Using Policy Manager Console | 51
Show domain values
Inheritance reports
button, the selected row is emptied; the result depends
operation to see what
Force value operation
that show where inherited