 Re: best way to manage gateway
I think it's best to keep it simple to reduce the chance of making mistakes. I'd create a separate policy for each firewall, named in a distinct way so you don't accidentally modify the wrong one. Always set the "Install On" cell with the name of the firewall instead of using "policy targets". That will help keep you from editing the wrong one as well.
If you do try to push policy "A" to firewall "B", FW-1 will warn you that you are about to install a policy with a different name.
Ray |