The Policy Agent can act as a policy server, a policy client, or
neither. For more information on these different roles, see Policy types and infrastructure overview. Regardless of which option is used to configure IDS
policies, the resulting configuration files need to be specified using
different statements, depending on the role of the Policy Agent.
- If you are using the Policy Agent as a policy client that retrieves
IDS policies from the policy server, specify the configuration files
using the DynamicConfigPolicyLoad statement on the policy server.
- If you are using the Policy Agent as a policy client, but the
policy client does not retrieve IDS policies from the policy server,
specify the configuration files using the IDSConfig statement on the
policy client.
- If you are not using a policy client/policy server environment,
specify the configuration files using the IDSConfig statement on the
single Policy Agent.
When this information refers to configuration files, keep
in mind where the files should exist, based on the role of the Policy
Agent.