4 Chapter 4. Policy agent The policy agent runs in a z/OS address space and provides various services in managing dependent components of the z/OS Communications Server policy infrastructure. Depending on your configuration options, the policy agent can act in the following roles: When acting as a policy decision point (PDP), the policy agent executes on a single system and installs policies on one or more z/OS Communications Server stacks on a z/OS image. When acting as a policy client , the policy agent retrieves remote policies from the policy server. When configured as a central policy server , the policy agent provides PDP services to one or more remote policy clients. We discuss the following topics in this chapter. Section 4.1, "Policy agent description" on page 100 4.2, "Implementing PAGENT on z/OS" on page 107 4.3, "The IBM Configuration Assistant for z/OS Communication Server" on page 123 4.4, "Backup and migration considerations" on page 130 4.5, "Setting up the Traffic Regulation Management Daemon" on page 137 4.6, "Additional information" on page 138 Topics Using a policy agent as a central repository for policies as well as basic concepts of the policy agent The basic installation steps for the policy agent How to install and use IBM Configuration Assistant for z/OS Communication Server to generate the policy agent configuration files. Finer points of migrating from one release of policy agent to a newer release and of merging separate policy files. Setting up Traffic Regulation Management Daemon (TRMD) to work in conjunction with intrusion detection services (IDS) to handle policy agent messages. Resources for additional information © Copyright IBM Corp. 2010. All rights reserved. 99