Forum: Cfengine Help Subject: Re: server control Author: neilhwatson Link to topic: https://cfengine.com/forum/read.php?3,21207,21209#msg-21209
Typically I try to mirror the customer's security policy. If they limit traffic between subnets then I'll limit the server's allowed networks. I manually distribute the policy server's key. The policy server is configured to trust client keys. I do keep a promise bundle to perform a trust key exchange but it is not automatic. I must call it manually. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine