6-21
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 6 Managing Policy Objects
Working with Policy Objects—Basic Procedures
Navigation Path
Open the Policy Object Manager, page 6-4. Select an object type that can be overridden (its object page
contains a column called Overrides), then do one of the following:
• Double-click the green checkmark in the Overrides column.
• Right-click the object and select Edit Device Overrides.
• Edit the overridable object and click Edit next to the Overrides field.
Related Topics
• Understanding Policy Object Overrides for Individual Devices, page 6-17
• Allowing a Policy Object to Be Overridden, page 6-18
• Creating or Editing Object Overrides for Multiple Devices At A Time, page 6-19
• Deleting Device-Level Object Overrides, page 6-21
• Filtering Tables, page 1-45
• Filtering Items in Selectors, page 1-42
Deleting Device-Level Object Overrides
Deleting a device-level override restores the global definition of the object to the selected device. You
can delete overrides from the Device Properties window or from the Policy Object Manager window:
• Deleting overrides from Device view—Right-click the device and select Device Properties, then
select the object type from the Policy Object Overrides folder. Select the override you want to
delete and click Delete Override.
• Deleting overrides from the Policy Object Manager—Select the object type from the table of
contents, then right-click the object and select Edit Device Overrides. Select the override you want
to delete and click Delete Override.
Related Topics
• Understanding Policy Object Overrides for Individual Devices, page 6-17
• Allowing a Policy Object to Be Overridden, page 6-18
• Policy Object Override Pages, page 3-49
• Policy Object Overrides Window, page 6-20
Importing and Exporting Policy Objects
Security Manager includes a Perl script that you can use to export network/host, service, and port list
policy objects so that you can import them into another Security Manager server. The information
includes device-level overrides for policy objects that have them.
Note The command works with network/host objects that contain IPv4 addresses only. You cannot use the
command to import network/host-IPv6 objects.
