Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Edit, Clone, and Delete IPS Signature Static Groups

Users with the tenant administrator role or a custom role with appropriate IPS tasks can edit, clone, or delete IPS signature static groups.

Edit IPS Signature Static Groups

You can edit only customized IPS signature static groups and not predefined (system-generated) static groups.

To edit a customized IPS signature static group:

  1. Select Configuration > IPS > IPS Signatures.

    The IPS Signatures page appears.

  2. Select a customized IPS signature static group and click the edit (pencil) icon.

    The Edit IPS Signature Static Group page appears, displaying the same fields that are presented when you create an IPS signature static group.

  3. Modify the IPS signature static group fields as needed. See Create IPS Signature Static Groups.
    Note:

    You can modify all fields except the name.

  4. Click OK to save your changes.

    You are returned to the IPS Signatures page and a message that the IPS signature static group was successfully updated is displayed.

If the IPS signature static group was used in an IPS or exempt rule that is deployed on the device (through the firewall policy), then the firewall policy is marked for deployment. You must deploy the firewall policy for the changes to take effect on the device.

Clone IPS Signature Static Groups

Cloning enables you to easily create a new IPS signature static group based on an existing one. You can clone predefined or customized IPS signature static groups and modify the parameters as needed.

To clone an IPS signature static group:

  1. Select Configuration > IPS > IPS Signatures.

    The IPS Signatures page appears.

  2. Select an IPS signature static group and select More > Clone.

    The Clone IPS Signature Static Group page appears, displaying the same fields that are presented when you create an IPS signature static group.

  3. Modify the IPS signature static group fields as needed. See Create IPS Signature Static Groups.
  4. Click OK to save your changes.

    You are returned to the IPS Signatures page and a message that the IPS signature static group was successfully created is displayed.

After you clone an IPS signature static group, you can use the static group in an IPS or an exempt rule and reference the IPS profile (containing the rule) in a firewall policy that you can then deploy on the device.

Delete IPS Signature Static Groups

Note:

  • You can delete only customized (user-created) IPS signature static groups that are not used in an IPS or exempt rule.

  • You cannot delete predefined (system-generated) IPS signature static groups.

To delete one or more customized IPS signature static groups:

  1. Select Configuration > IPS > IPS Signatures.

    The IPS Signatures page appears.

  2. Select one or more customized IPS signature static groups and click the delete (trash can) icon

    A warning message appears asking you to confirm the deletion.

  3. Click Yes to proceed with the deletion.

    You are returned to the IPS Signatures page and a message indicating the status of the delete operation is displayed.

Related Documentation