F-SECURE POLICY MANAGER 8.0, Administrator'S Manual

Page: 191 / 221

CHAPTER 11 191
Troubleshooting
11.4 Policy Distribution
Q. When distributing a policy, F-Secure Policy Manager Console
shows an error message about an invalid policy value. What
should I do?
A. See below for information on error messages you may see during
policy distribution, and for the reasons and solutions.
Error messages: "<setting name>" has value out of
restriction
"<setting name>" has invalid restriction
"<setting name>" has invalid value:
"<value>"
Reason 1 : The value selected from a choice list is not
among the choices on a sub-domain or host,
too high or low values are specified as range
restriction boundaries, or an empty choice
list is specified.
When a domain includes hosts that have
different product versions installed, the MIB
settings from the newest product version are
used for editing the policy values. As result,
policy distribution may fail on hosts that have
older versions of the software installed,
because the older versions do not support
the new policy settings or values.
Solution: Divide the hosts into subdomains so that it is
possible to set the new value for hosts with
the new software installed, and to use some
older policy values for other hosts. To do
this: