The Policy Agent can act as a policy server, a policy client, or
neither. For more information on these different roles, see Policy types and infrastructure overview. Regardless of which option is used to configure IP
security policies, the resulting configuration files need to be specified
using different statements, depending on the role of the Policy Agent.
- If you are using the Policy Agent as a policy client that retrieves
IP security policies from the policy server, specify the configuration
files using the DynamicConfigPolicyLoad statement on the policy server.
- If you are using the Policy Agent as a policy client, but the
policy client does not retrieve IP security policies from the policy
server, specify the configuration files using the IPSecConfig statement
on the policy client.
- If you are not using a policy client/policy server environment,
specify the configuration files using the IPSecConfig statement on
the single Policy Agent.
When this information refers to configuration files, keep
in mind where the files should exist, based on the role of the Policy
Agent.