Locking Settings in Descendant Access Control Policies
Lock a setting in an access control policy to enforce the setting in all descendant policies. Descendant policies can override unlocked settings.
When you lock settings, the system saves overrides already made in descendant polices so that the overrides can be restored if you unlock settings again.
Procedure
Step 1 | In the access control policy editor, select Inheritance Settings from the More drop-down arrow at the end of the packet flow line. |
Step 2 | In the Child Policy Inheritance Settings area, check the settings you want to lock. If the controls are dimmed, settings are inherited from an ancestor policy, or you do not have permission to modify the configuration. |
Step 3 | Click OK to save the inheritance settings. |
Step 4 | Click Save to save the access control policy. |
What to do next
-
Deploy configuration changes.