Enterprise Administration Guide › Managing Policies Centrally › How to Create and Deploy a Policy › Policy Verification › How Policy Verification Works

How Policy Verification Works

Policy verification verifies that a policy can deploy without errors before it actually deploys on the endpoint.

Note: Policy verification is not enabled by default.

The following process describes how policy verification works:

1. You assign a policy to a host or host group.
2. On each endpoint, CA Access Control Enterprise Management verifies the policy.
3. One of the following happens:
   • If the policy does not contain errors, CA Access Control Enterprise Management deploys the policy to the endpoint.

     The endpoint updates the DMS that the policy status is Deployed.

   • If the policy script contains an error, CA Access Control Enterprise Management does not deploy the policy to the endpoint.

     The endpoint updates the DMS that the policy status is Not executed. The DMS also updates the status of each deployment task that corresponds to the policy with the script error to Fail.

     Note: You can use the Deployment Audit feature in CA Access Control Enterprise Management to view the scripts with errors.