# Policy Manager

In the Policy Manager you can manage the settings of several hosts together. You can...

* allow network recording and select the detection level of the intrusion detection system.
* manage AutoUpdates.
* define exception lists.
* enable recording of security relevant events (recording of the logs for [system events](/docs/manual/english/operation/platform/legacy/hosts-agent-pulsar/system-events.md)).
* allow the execution of custom plugins.
* enable the Shield component.
* enable advanced software monitoring.
* customize the API URL.

The settings are immediately applied to all selected hosts.

<figure><img src="/files/KUigcODPoJ5AvS2HxK9H" alt=""><figcaption></figcaption></figure>

To add a new policy:

1. Click on 'Add Policy'.
2. Enter a name and a description.
3. Under 'Assigned references', specify the hosts to which the settings are to be applied. You can either select the hosts directly or use Tag, which we recommend.
4. Under 'Policies' you can define which settings should be managed by the policy. Then define the forced setting (active/inactive).
5. Click 'Save Changes' to add the policy.

You can further specify the selection of tags:

* All tags are present in the reference: If all tags you have assigned to the policy are also present at the host, the policy is applied.
* At least one of the specified tags is present: If one of the tags is assigned at the host, the policy is applied.

{% hint style="danger" %}
**You want to delete or undo a policy?**.

If you create a policy, the settings of the assigned hosts are overwritten. If you delete a policy, the settings are still applied to the settings of the individual host.

If you want to undo a setting that you have made via a policy, you must therefore additionally either:

* Adjust the settings of the individual host.
* Create a new policy that applies the changed settings to the hosts.
  {% endhint %}

{% hint style="info" %}
If there are multiple policies associated with the same host and the same settings are managed by the policy, Enginsight will select the settings of the most recently created policy.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.enginsight.com/docs/manual/english/operation/platform/legacy/hosts-agent-pulsar/policy-manager.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.