Assign an inspection option policy to Sensor resources

Prerequisite: Make sure you have created an inspection option policy with advanced callback configuration.

If you apply a policy to a subinterface that is different than the interface policy, the policy enforced at the interface level protects all traffic not specific to the subinterface. Thus, interface rules only apply to interfaces, and subinterface rules only apply to subinterfaces.

Note
In case of inspection option policy, you don't assign policies separately for inbound and outbound. You specify the direction for each inspection option in the policy.

Steps:

Select Intrusion Prevention → Policy Manager → Interfaces.
Enter a string in the text box next to Clear All Filters to quickly locate the required interface.
For example, enter IPS to display the records containing this string in any of the columns.
Double-click the required record and in the right-side pane, scroll down to the Inspection Options section.
Select the required inspection option policy from the Policy list and click Save.
Do a configuration update for the Sensor to enforce the policy.

Alternative method to assign an inspection option policy

You can assign inspection option policies from the Inspection Options page. If you select the Prompt for assignment after save option in the policy, you are prompted to assign the policy to the relevant interfaces and sub-interfaces.

Select Intrusion Prevention → Inspection Options.
Click the Assignments value of the policy that you want to assign.
The Assignments window displays.

Assign the IPS policy to the required interfaces and subinterfaces.

Option	Definition
Search Interfaces	To filter the list of available interfaces, enter a string that is part of the Available Interfaces.
Available Interfaces	Lists the interfaces and subinterfaces of the Sensors in the admin domain. The Sensor interfaces to which you have already assigned this IPS policy are displayed under Selected interface. Note In case of Sensors in failover, the ports used for interconnection of the Sensors are not displayed. If you assign an IPS policy to an interconnect port, the assignment is automatically removed when you create the HA pair. Select a resource and click to move it to Selected Interface.
Current Policy	The inspection option policy that is currently assigned to an interface or sub-interface. To replace that policy with the policy that you are currently assigning, move the interface or sub-interface to Selected Interface.
Selected Interface (Policy Group)	Lists the Sensor interfaces to which you have assigned the selected inspection option policy.
Reset	Reverts to last saved configuration.
Save	Saves the changes to the Manager database.
Cancel	Closes the Assignments window without saving the changes.

Do a configuration update for the corresponding Sensors to enforce the policy.