You can customize this IPS policy only for this interface. Such a customized IPS policy is referred to as the Interface-Specific Customization. The initial attack settings are inherited from the assigned policy, yet customization to the policy affect this interface only.
Click the Policy tab.
Select the domain from the Domain drop-down list.
Navigate to Intrusion Prevention → Policy Manager → Interfaces.
Double-click on the interface for which you want to customize the policy.
The <Device Name/Interface> panel opens on the right side.
Under the IPS section, select the policy from the Policy drop-down list that you want to assign to the interface.
Click on 0 next to the Customized Attacks field under Interface-Specific Customization.
The Attack Definitions window opens.
Select the policy you want to disable for the interface and click Disable one by one.
To disable multiple policies at once, use the Ctrl key to select the policies and then click Disable.
Note
All the attacks are enabled by default.
Attack Definitions page.png "GUID-EC5DF327-2B08-42AE-BC3C-6751B08A815B-low.png")
Click Save to save the changes.
A Save Confirmation window opens. Click Confirm to save the changes.
Confirmation message.png "GUID-58A0ECF2-DB62-4ED7-8832-6BF67B672D7C-low.png")
Click the X icon to exit the window without saving the changes.
Click the Save button in the <Device Name/Interface> panel to save all the changes.
The Customized Attacks field shows the integer value of the number of attacks customized for that policy.
Click the
.png)
icon to merge the customized policy with the assigned policy.A confirmation message is displayed. Click Yes to confirm.
Customized attacks merge.png "GUID-6D22E234-5CD8-4926-B884-41E828D6F612-low.png")
After a successful merge, the Customized Attacks field shows the value as "0".
Note
You can customize the IPS policy in both the interface and subinterface levels.
Click the
.png)
to delete any customization made to the policy, before merging it with the assigned policy.A confirmation message is displayed. Click Yes to confirm. The Customized Attacks field displays "0" as the integer value.
Do a configuration update for the corresponding Sensor for the changes to take effect.