Forcepoint™ Security Management Center Service Online Documentation

Home
Policy Creation and Administration
Creating and managing policy elements
Policy elements are containers for the rules that determine how Engines, Master Engines, and Virtual Engines examine traffic. The policy elements for the Engines include Template Policies, Policies, and Sub-Policies.
Creation and managing policy elements
IPS Policy example
You might want to restrict the policy editing rights of administrators to the IPS Engines at their sites.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
Policy Creation and Administration
- Overview
  Policies are key elements that contain rules for allowing or blocking network traffic and inspecting the content of traffic.
- Creating and managing policy elements
  Policy elements are containers for the rules that determine how Engines, Master Engines, and Virtual Engines examine traffic. The policy elements for the Engines include Template Policies, Policies, and Sub-Policies.
  - Creation and managing policy elements
    - Getting started with policies
      Policies organize traffic processing rules hierarchically, to make administration easier and to optimize traffic inspection performance.
    - Create template policies or policies
      Template Policy elements are used as a basis for Policies and other Template Policies.
    - How sub-policies work
      Sub-Policies are sections of Access rules that you can insert in the IPv4 or IPv6 Access rules of Policies, Template Policies, or other Sub-Policies.
    - Install policies
      After creating or editing a policy, you must install or refresh the policy on the Engine.
    - Using policy elements and rules
      Names, comments, and the Continue action make policy rules easier to use. You can also enable policy validation and configure user responses and connection tracking.
    - Deleting policies templates or sub-policies
      If no policies are based on a policy template, you can delete the template. Similarly, you can delete a Sub-Policy as long as no Jump rules use it.
    - Engine Policy elements examples
      Using Engine Policy elements, you can protect essential communications, make Engine rules more readable and Engine Policies more efficient, and manage network administrator rights.
    - IPS Policy example
      You might want to restrict the policy editing rights of administrators to the IPS Engines at their sites.
      - Restricting administrator editing rights in IPS Policies example
        You can restrict the policy editing rights of administrators to the IPS Engines at their sites.
    - Local alternative policies
  - Editing policies
    The rules in Engine and Layer 2 Interface Policies allow you to control how the Engines inspect and filter network traffic, and how NAT (network address translation) is applied on Engines, Master Engines, and Virtual Engines.
- Rule Types within Policies
- Policy Supporting Elements
- Inspection & Content Filtering Policies
- Access Control & Authentication Policies
- Policy Troubleshooting & Maintenance
Monitoring
VPN

IPS Policy example

You might want to restrict the policy editing rights of administrators to the IPS Engines at their sites.

Restricting administrator editing rights in IPS Policies example
You can restrict the policy editing rights of administrators to the IPS Engines at their sites.

Copyright © 2026 Forcepoint LLC