Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Edit, Clone, and Delete an IPS Signature Static Group

You must have the tenant administrator role or a customized role assigned with the appropriate IPS tasks to modify customized IPS signature static groups.

Edit an IPS Signature Static Group

You can edit only customized IPS signature static groups, and not predefined (system-generated) static groups.

To edit a customized IPS signature static group:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select a customized IPS signature static group, and click the edit (pencil) icon.

    The Edit IPS Signature Static Group page opens.

  3. Modify the IPS signature static group fields. See Create an IPS Signature Static Group.
    Note:

    You cannot modify the IPS signature static group name.
  4. Click OK to save your changes.

    The IPS Signatures page opens with a message that the IPS signature static group was successfully updated.

    If the IPS signature static group was used in an IPS rule or exempt rule that is deployed on the device through the firewall policy, then the firewall policy is marked for deployment. You must deploy the firewall policy for the changes to take effect on the device.

Clone an IPS Signature Static Group

Cloning enables you to easily create an IPS signature static group based on an existing one. You can clone predefined or customized IPS signature static groups and modify the parameters.

To clone an IPS signature static group:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select an IPS signature static group, and select More > Clone.

    The Clone IPS Signature Static Group page opens.

  3. Modify the IPS signature static group fields. See Create an IPS Signature Static Group.
  4. Click OK to save your changes.

    The IPS Signatures page opens with a message that the IPS signature static group was successfully created.

    You can use the cloned IPS signature static group in an IPS rule or an exempt rule. You can then reference the IPS profile containing the rule in a firewall policy, which you can deploy on the device.

Delete IPS Signature Static Groups

Note:

You can delete only customized (user-created) IPS signature static groups that are not used in an IPS or exempt rule. You cannot delete predefined (system-generated) IPS signature static groups.

To delete the customized IPS signature static groups:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select one or more customized IPS signature static groups, and click the delete (trash can) icon.

    A warning message asking you to confirm the deletion is displayed.

  3. Click Yes.

    The IPS Signatures page opens with a message indicating the status of the delete operation.