Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Creating IPS Signature Static Groups

Before You Begin

Use the IPS Signature Static Group page to configure a specific, finite set of attack objects or groups.

Static groups require more maintenance than dynamic groups because you must manually add or remove attack objects in a static group to change its members.

Use an IPS signature static group for the following tasks:

  • Group your custom attack objects.

  • Dynamic—Contains attack objects based on certain matching criteria.

  • Static—Contains customer-defined attack groups and can be configured through the CLI.

To configure an IPS signature static group:

  1. Select Configure > IPS Policy > Signatures.
  2. Click Create.
  3. Select Static Group.
  4. Complete the configuration according to the guidelines provided in the Table 1.
  5. Click OK.

A new IPS signature static group with the predefined configurations is created. You can use this signature in IPS policies.

Table 1: IPS Signature Static Group Settings

Settings

Guidelines

Name

Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. No spaces are allowed and the maximum length is 63 characters.

Group Members

Add or delete group members of a static group.

Group members include custom groups whose members are predefined attacks, predefined attack groups, custom attacks, or custom dynamic groups.

A custom group defines:

  • A specific set of critical attack objects that you know your network is vulnerable against.

  • A specific set of informational attack objects that you need to stay aware of events on your network.

Add IPS Signatures

IPS Signatures

Select one or more available IPS signatures to include in a static group.

Related Documentation