Enable or Disable IPS for a Policy
When you enable IPS, it is automatically enabled for all policies. You can choose to disable it for a specific policy in the IPS configuration or when you edit a policy.
- Select Subscription Services > Intrusion Prevention Service.
The IPS configuration page opens. The IPS Policies section shows whether IPS is enabled for each policy.
- To disable IPS for one or more policies, select the policies in the list.
Use the Control or Shift keys to select multiple policies at the same time. - To disable IPS for the selected policies, from the Select Action drop-down list, select Disable.
To enable IPS for the selected policies, click Enable. - Click Save.
To disable or enable IPS for a policy, from Policy Manager:
- Select Subscription Services > Intrusion Prevention.
The Intrusion Prevention Service dialog box opens. - Select the Policies tab.
The list of configured policies shows.
- To disable IPS for one or more policies, select the policies in the list.
Use the Control or Shift keys to select multiple policies at the same time. - To disable IPS for the selected policies, from the Select Action drop-down list, select Disabled.
To enable IPS for the selected policies, click Enabled. - Click OK.
If you enable IPS for an HTTPS-proxy policy, you must also enable Content Inspection in the HTTPS-proxy action, in order for IPS to scan the HTTPS content. For more information, go to HTTPS-Proxy: Content Inspection.
To enable or disable IPS when you edit a policy, from Fireware Web UI:
- Select Firewall > Firewall Policies.
- Double-click a policy.
- To enable IPS, select the Enable Intrusion Prevention check box.
To disable IPS, clear the Enable Intrusion Prevention check box. - Click Save.
To enable or disable IPS when you edit a policy, from Policy Manager:
- In Policy Manager, add or edit a policy.
The Policy Properties dialog box opens with the Policy tab selected. - To enable IPS, select the Enable IPS for this policy check box.
To disable IPS, clear the Enable IPS for this policy check box. - Click OK.