aXsGUARD Identifier 3.0.2.0 Product Guide v1.5
Policies
20.3
Policy Inheritance
Many Policies are already provided in the aXsGUARD Identifier. Amongst these, the 'Base Policy' can be used as a
starting template, from which to adapt certain settings for new policies. This concept is called Policy inheritance.
Policies may be set up in a hierarchy, where one Policy inherits most of its attributes from a parent Policy, but with
some modifications for a slightly different scenario. In the example below, all settings are inherited from the parent
Policy, except those explicitly set.
Image 43: Policy Inheritance
As the various levels of settings in Policy inheritance can get confusing, functionality is available which allows you
to view the settings effective for a selected Policy, taking inherited settings into account. The Administration Web
Interface presents separate columns showing settings explicitly set in a policy, and effective settings (i.e. both
settings specific to the policy and those inherited from parent policies). The text below shows the effective settings
for the
IDENTIKEY Server RADIUS Self-Assignment Policy.
The settings include those set in Policies from which the
IDENTIKEY Server RADIUS Self-Assignment Policy inherits:
©
2009 VASCO Data Security
122
