IP security policy files

The IP security configuration files for a TCP/IP stack that has the IPSECURITY parameter defined can be modified while the stack is active in the following ways:

• Policy Agent configuration, including IP security, is updated at each configured refresh interval that is specified on the TcpImage statement for local policies or on the DynamicConfigPolicyLoad statement for remote policies. The default is 30 minutes.
• If Policy Agent was started with the -i option and the configuration files are stored in a z/OS® UNIX file, changes to any of the configuration files are detected and updated dynamically without user intervention. The -i option has no effect when the policies are stored in remote configuration files on the policy server.
• Policy Agent configuration, including IP security, can be updated at any time by issuing the MODIFY PAGENT,REFRESH command or the MODIFY PAGENT,UPDATE command from the console of the policy client.