Previous Topic: Cannot Remove the Status of a Policy VersionNext Topic: Built-In Variable Is Not Refreshed


Rule with Variable Does Not Deploy On Endpoint

Symptom:

I created a policy that contains a rule with a variable and deployed the policy to an endpoint, but the rule is not implemented on the endpoint.

Solution:

Use the following procedure to troubleshoot the policy deployment:

  1. Verify that the value of the policyfetcher_enabled configuration setting in the policyfetcher section on the endpoint is 1.

    A value of 1 for this configuration setting specifies to run policyfetcher. If policyfetcher is not running, it cannot deliver the policy to the endpoint.

  2. Check the policyfetcher log for errors.

    Note: The policyfetcher log is in the ACInstallDir/Log directory, where ACInstallDir is the directory in which you installed CA ControlMinder.

  3. Use CA ControlMinder Endpoint Management to verify that the variable is defined on the endpoint.

    Note: If the variable is not defined on the endpoint, the policy status is Deploy Pending.

    If the variable is not defined on the endpoint, create a new policy version that contains a selang rule that defines the variable, and deploy the new policy version to the endpoint.

  4. Verify that the following are true:
  5. Audit deployment information to verify that:

    If policy did not correctly compile or the DEPLOYMENT object contains errors, fix the errors and redeploy the policy.

  6. Restart CA ControlMinder.

More information:

Guidelines for Using Variables