Forum: Cfengine Help
Subject: Re: server control
Author: neilhwatson
Link to topic: https://cfengine.com/forum/read.php?3,21207,21209#msg-21209

Typically I try to mirror the customer's security policy.  If they limit 
traffic between subnets then I'll limit the server's allowed networks.

I manually distribute the policy server's key.  The policy server is configured 
to trust client keys.  I do keep a promise bundle to perform a trust key 
exchange but it is not automatic.  I must call it manually.

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to