Network Service Bundles

Cisco Secure Policy Manager comes with several pre-defined network service bundles, but you can create additional bundles or modify the pre-defined bundles according to your particular needs.

Additionally, you can create folders under the Network Service Bundles branch in which to organize your bundles in a manner meaningful to you or your organization.

Network service bundles are convenient because they reflect the nature of most applications (such as a web browser) that require several network services to function. You can create network service bundles to represent the composition of a particular application, or you can model them after the logical organizations that exist on your network, such as a development team or corporate department. Network service bundles spare you from having to reference network services singly within your security policy abstracts.

The tool that you use to create network service bundles is a simple add/remove list. It enables you to select one or more network services from a list and then add them to or remove them from the bundle with the click of a button. When you add a service to or remove a service from a bundle, this change is propagated to all security policies that reference the service bundle, and will take effect when you save them to the database and generate and publish the command sets.

To create a new network service bundle, perform the following task:

Step 2 Right-click the Network Service Bundles branch icon in the Navigator pane, point to New, and then click Network Service Bundle on the shortcut menu.

Result: A new icon representing the network service bundle appears in the Navigator pane with the Name box selected for editing. The network service bundle's properties appear in the View pane.

Note You do not need to create a new network service bundle directly under the Network Service Bundles branch, but can instead right-click a folder icon (the folder in which you want to store the new network service bundle) under the branch to create the network service bundle inside the folder.

Step 3 Type the name in the selected Name box, and then press Enter.

Result: The new name is applied to the new bundle.

Cisco Secure Policy Manager enables long names and the use of most alphanumeric or symbol characters. Also, you can use both uppercase and lowercase characters. However, you cannot use quotation marks (") or a semicolon (;).

Tips If you cannot edit the name, right-click the new Network Service Bundle node, and click Rename on the shortcut menu.

Step 4 To add a network service to the bundle, select the network service in the Available network services box, and then click Add.

Result: The network service name moves to the Included network services box. Repeat this step until you have added all desired network services to the new network service bundle.

Note You cannot select multiple services in the Available network services box; you must add each service individually.

Step 5 To remove a network service, select the service in the Included network services box, and then click Remove.

Result: The network service name no longer appears in the Included network services box. Repeat this step until you have removed all unwanted network services from the network service bundle.

Note You cannot select multiple services in the Included network services box; you must remove each service individually.

Step 6 To accept your changes and close the properties panel, click OK.

Step 7 To save any changes that you have made, click Save on the File menu.

To modify an existing network service bundle, perform the following task:

Step 2 Click the Network Service Bundle icon in the Navigator pane.

Result: The panel for modifying the network service bundle appears in the View pane.

Tips If the properties panel for the network service bundle does not display, right-click the Network Service Bundle icon in the Navigator pane and click Properties on the shortcut menu.

Step 3 To add a network service to the bundle, select the network service in the Available network services box, and then click Add.

Result: The network service name moves to the Included network services box. Repeat this procedure until you have added all desired network services to the network service bundle.

Note You cannot select multiple services in the Available network services box; you must add each service individually.

Step 4 To remove a network service, select it in the Included network services box, and then click Remove.

Result: The network service name no longer appears in the Included network services box. Repeat this procedure until you have removed all unwanted network services from the network service bundle.

Note You cannot select multiple services in the Included network services box; you must remove each service individually.

Step 5 To accept your changes and close the panel, click OK.

Step 6 To save any changes you have made, click Save on the File menu.