Enterprise Administration Guide › Managing Policies Centrally › How Advanced Policy-based Management Works › Endpoint Data That the DMS Holds

Endpoint Data That the DMS Holds

When you configure your environment for advanced policy management, endpoints in your enterprise notify the DMS, through the configured DHs, of status changes in three areas:

• Policy deployment and undeployment

  When a policy is being deployed or undeployed, the endpoint sends a notification. The following details are then updated according to the result of the operation:

  • Policy details
  • Deployment status (succeeded, failed, and so on)
  • The selang command output for policy commands that failed to execute
  • HNODE policy status (deployed, deployment failed, and so on)
• Host heartbeat

  At regular configurable intervals, each endpoint sends a heartbeat to account for the host being online.

• Deviation status

  After each heartbeat, the endpoint calculates policy deviation, and sends the result (deviation found or not found).

  Note: If the policyfetcher finds deployment and deviation status conflicts between the endpoint and the DH, resolve the conflicts based on the information that you received from the endpoint .