Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] Indevice and central policy mode options on the NSM GUI



Article ID: KB22951 KB Last Updated: 18 Mar 2021Version: 3.0
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE). 
Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.

This article provides information about the indevice and central policy mode options on the NSM GUI. These options are accessed by right-clicking the device and one of the listed options is policy management mode.

Note: This option is available only for SRX devices.
Understanding the indevice and central policy modes in NSM.
Indevice policy mode:

This policy on the device cannot be assigned to any other device managed by NSM, limiting NSM functionality. Now, in order to edit or view the policy, the devices needs to be edited via configuration > security > policy. The policy can still be seen under the Policy manager, but it is not assigned to any device and no longer a part of device configuration. The objects used by the device will no longer be managed by the NSM object manager. Also, when enabling this mode, it is recommended to delete the old policy under policy manager to avoid confusion.

Central policy mode:

This policy on the device can be assigned to other devices. This is the default mode, in which any device is added into NSM; providing the flexibility to the end user to have multiple devices having a single policy in NSM. The rules within the policy can then be installed between these devices, depending on the requirement

Note: Changing the modes results in an import of the device configuration. Using the indevice Policy mode is not recommended.
Modification History:
2021-03-09: Article reviewed for accuracy; no changes.
2020-10-18: Article marked as EOL/EOE.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search