4.3	Deploying a default protection policy

After having added computers to a protection policy and specified log-on credentials, the policy can now be deployed to the target computers. You can either deploy the policy immediately, or else schedule the deployment.

NOTE: When a policy is being deployed for the first time to a target computer, GFI EndPointSecurity will also automatically install an agent on that computer. This agent will process all read/write requests made to portable devices, using the deployed protection policy as reference. This also applies to computers where agents have previously been un-installed.

4.3.1

Deploy immediately

To immediately deploy a protection policy on to selected targets:

1. Click on the Configuration tab

2. Click Protection Policies

Screenshot 15 - Deploy agents

3. From the left pane, right-click on the protection policy to deploy and select Deployment ► Deploy agent(s).

NOTE: You can also use the keyboard shortcut CTRL + D to perform this step.

4. From the ‘Select computers for deployment’ dialog, select the target computers to which to deploy the policy.

NOTE: The target computers listed are those which you have added to the protection policy.

NOTE: By default all computers are selected.

5. Click OK to commence deployment.

Screenshot 16 - Deployment status view

NOTE: GFI EndPointSecurity automatically changes to the ‘Deployment Status’ view in the management console, where you can view deployment progress.

4.3.2

Schedule the deployment

To schedule deployment of a protection policy on to selected targets:

1. Click on the Configuration tab

2. Click Protection Policies

3. From the left pane, right-click on the protection policy to deploy and select Deployment ► Schedule deployment for agent(s)

4. From the ‘Select computers for deployment’ dialog, select the target computers to which to deploy the policy.

Screenshot 17 - Scheduled deployment setup

5. Specify the date and time when to start deployment.

NOTE: A scheduled deployment will go ahead even if the GFI EndPointSecurity management console application is not running.