Edit Rule Groups in a Custom IPS Policy

You can override the default action of a rule within a rule group. Use the following procedure to edit the rules contained within the rule group

Procedure

Step 1

From the CDO Navigation pane, click Policies.

Step 2

Select Intrusion Policies.

Step 3

Identify the IPS policy you want to edit. Click Edit.

Step 4

From the Rule Group tab located to the left, expand the desired rule group. From the expanded list, select the group.

Step 5

Edit the rule group:

  1. Edit the Security Level of the entire rule group by selecting the security level bar. Manually drag the security level to the type of security you want applied to the entire rule group. Click Submit

  2. Edit the Rule Action of an individual rule by expanding the rule's drop-down menu located to the right.

  3. Edit the Rule Action of multiple rules by selecting the checkboxes of the desired rules and expanding the drop-down menu located above the table of rules. This selection impacts all selected rules.

  4. Edit the Rule Action of all the rules by selecting the checkbox in the title row of the table and expanding the drop-down menu located above the table of rules. This selection impacts all the rules in the rule group.

Step 6

Click Save at the top of the policy page.

Step 7

Review and deploy now the changes you made, or wait and deploy multiple changes at once.