Visibility for Publishing CMA Policies

Overview

When you publish changes to policies in the Cato Management Application (CMA), it takes time for the updated settings to propagate across all the PoPs in the Cato Cloud. The My Policy Changes tab in the Notifications panel shows the progress of the propagation across the PoPs in the Cato Cloud. It displays the name of the relevant policy, the time the change started propagating, and the propagation status or completion percentage. You can also view a list of changes that have been completed in the last 30 days.

Policy Sync Behavior Across the Cato Cloud

During the policy propagation window, some PoPs may enforce the new configuration before others, resulting in momentary differences in your policies.

For example, if you update a firewall rule to block a newly identified threat, the new rule may be enforced immediately in one location, while still pending application in another. This can result in momentary differences in how traffic is handled across locations.

On average, policy changes are propagated in less than 1 minute.

Viewing Policy Publishing

When you publish a change, the notifications icon notification_icon.png at the top of every page in the CMA indicates that a change is in progress. Clicking the notifications (bell) icon and going to the My Policy Changes tab shows the status of the policy propagation that is in progress. Each admin can only view their own changes.

Click the Audit Trail link to go to that page, and it is automatically filtered by the current admin and the policy. 

my_policy_changes.png

To view the status of recent policy changes:

  1. From the top of the CMA, click Notifications (bell icon).
  2. Select My Policy Changes.

Supported Policies

Viewing the status of recent policy changes is currently supported in the following policies:

  • Internet Firewall
  • LAN Firewall
  • WAN Firewall
  • Network Rules
  • Remote Port Forwarding
  • Dynamic IP Allocation
  • PAC File
  • Always-On Policy
  • Tenant Restriction
  • Client Connectivity Policy
  • Split Tunnel
  • DNS Settings
  • TLS Inspection
  • Application Control
  • Terminal Server Policy
  • AI Security
  • Browser Extension
  • Adaptive Threat Protection

Was this article helpful?

1 out of 1 found this helpful

0 comments