Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Create a Client Policy

When you create a policy, it is saved as a OPG file. You can deploy this policy file to endpoints using any third-party deployment tools/apps. Once you deploy the OPG file successfully, the changes made to this file are updated automatically at a set interval that is configured in the Client Profile section.

There are 2 ways to create a policy:

Add a New Policy

The new Skyhigh Client enables you to add a new policy by mapping the existing policy configurations to the newly created policy. These configurations can be modified as required. 

To add a new policy: 

  1. Log on to the SSE UI.
  2. Navigate to Policy > Skyhigh Client > Policy.  
  3. On the Client Policy dashboard, under the Getting Started tab, click New Policy.

    Screenshot (99)_1.png
    The Select a method to add a policy window opens.
     
  4. Under the Add a New Policy tab, in the Policy Name field, enter a name for the policy.
  5. Click Add Policy.


    The policy appears under the policy tree of the Client Policy dashboard. By default, a profile and gateway are linked to the new policy, which can be configured as and when required.

Migrate an Existing SCP Policy

The new Skyhigh Client enables you to migrate the V1 policy and its configuration to the V2 policy, where the V1 policy refers to the existing SSE policy, and the V2 policy is the new Skyhigh Client policy.

To migrate an existing SCP policy and its configuration: 

  1. Log in to the SSE UI.
  2. Navigate to Policy > Skyhigh Client > Policy.
  3. On the Client Policy dashboard, under the Getting Started window, click New Policy.

    Screenshot (99)_1.png
    The Select a method to add a policy window opens.
     
  4. Click the Migrate an Existing SCP Policy tab.

    clipboard_e98649e3175281a50fdc177460c9632cb.png
  5. Perform the applicable action:
    Case 1: If you have an existing SCP policy
    1. Under the Select an Existing SCP Policy tab:
      1. From the Select Policy drop-down, select a policy.
      2. In the Policy Name field, enter a name (A default name is auto-populated). 

NOTE: The name of the Policy, Client Profile, Gateway List, and Lists (from List Catalog) contain a common identifier. This is unique for every single migration attempt, ensuring that migrating the same policy multiple times works seamlessly.

  1. Click Migrate Policy.


    A progress bar is displayed indicating the migration status.

    (Optional) If an error message displays during the migration, click Try Again.

NOTE:  If the issue continues, contact Skyhigh Support

Upon successful migration, the message You have successfully migrated the Skyhigh Client Proxy policy displays.

  1. Click Done.

OR

Case 2: If you have an OPG file of the existing SCP Policy

  1. Click the Import an Existing SCP Policy tab:
    1. Click Browse.
    2. Select an applicable OPG file.
      The OPG file is uploaded.
    3. (Optional) Click Replace to replace a selected file.
    4. In the Policy Name field, enter a name. (A default name is auto-populated.) 

NOTE: The name of the Policy, Client Profile, Gateway List, and Lists (from List Catalog) contain a common identifier. This is unique for every single migration attempt, ensuring that migrating the same policy multiple times works seamlessly.

  1. Click Migrate Policy.


    A progress bar is displayed indicating the migration status

    (Optional) If an error message displays during the migration, click Try Again.

NOTE: If the issue continues, contact Skyhigh Support.

Upon successful migration, the message You have successfully migrated the Skyhigh Client Proxy policy displays.

  1. Click Done.

The migrated policy appears under the policy tree of the Client Policy dashboard. For more details on configuring policy, see Preset Rule.

By default, a profile, a gateway and lists are linked to the migrated policy, which can be configured as and when required. For more details on configuring profile, see Configure Skyhigh Client Profile.

  • Was this article helpful?