F-SECURE POLICY MANAGER 9.0, Administrator'S Manual, Page: 89 / 102

Policy distribution
You will find information on common error messages relating to policy distribution here.
Answer Question
See below for information on error messages you may
see during policy distribution, and for the reasons and
solutions. When distributing a policy, Policy Manager Console
shows an error message about an invalid policy value.
What should I do?
Solution Reason Error message
Divide the hosts into subdomains
so that it is possible to set the new Reason 1:
The value selected from a choice
list is not among the choices on a
"<setting name>" has value
out of restriction
"<setting name>" has
invalid restriction
value for hosts with the new
software installed, and to use some
older policy values for other hosts.
To do this:
sub-domain or host, too high or low
values are specified as range
restriction boundaries, or an empty
choice list is specified.
"<setting name>" has
invalid value: "<value>"
1. Group the hosts into subdomains
based on the installed product
When a domain includes hosts that
have different product versions
version. For example, group
hosts that have Client Security
installed, the MIB settings from the
6.x installed into one
newest product version are used for
sub-domain, and hosts that have
editing the policy values. As result,
Client Security 7.x installed into
another domain.
policy distribution may fail on hosts
that have older versions of the
2. Set most of the settings on the
root domain and create a
software installed, because the
older versions do not support the
new policy settings or values.
sub-domains for exceptions. This
is a good solution if you have
only a few hosts with the older
software versions installed.
Reason 2:
You entered an integer value that
is outside of the range restrictions.
Enter a value or apply the Clear
operation to re-inherit the value from
The setting is required but it is
currently empty.
"<setting name>" is
required but undefined
parent domain or MIB. If the value
is empty on several domain levels,
you may need to apply the
Clear
operation several times.
F-Secure Policy Manager | Troubleshooting | 89