One of the harder tasks while maintaining a structured security rulebase, is determining which applications should or should not be...

What does "Require Tag/Description on policies" do to existing rules?