Edit, Clone, and Delete IPS Signatures

Users with the tenant administrator role or a custom role with appropriate IPS tasks can edit, clone, or delete IPS signatures.

Edit IPS Signatures

You can edit only customized IPS signatures and not predefined (system-generated) signatures.

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select a customized IPS signature and click the edit (pencil) icon.

   The Edit IPS Signature page appears, displaying the same fields that are presented when you create an IPS signature.

3. Modify the IPS signature fields as needed. See Create IPS Signatures.

   Note You can modify all fields except the name.

4. Click OK to save your changes.

   You are returned to the IPS Signatures page and a message that the IPS signature was successfully updated is displayed.

If the IPS signature was used in an IPS or exempt rule that is deployed on the device (through the firewall policy), then the firewall policy is marked for deployment. You must deploy the firewall policy for the changes to take effect on the device.

Clone IPS Signatures

Cloning enables you to easily create a new IPS signature based on an existing one. You can clone predefined or customized IPS signatures and modify the parameters as needed.

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select an IPS signature and select More > Clone.

   The Clone IPS Signature page appears, displaying the same fields that are presented when you create an IPS signature.

3. Modify the IPS signature fields as needed. See Create IPS Signatures.
4. Click OK to save your changes.

   You are returned to the IPS Signatures page and a message that the IPS signature was successfully created is displayed.

After you clone an IPS signature, you can use the signature in an IPS or an exempt rule and reference the IPS profile (containing the rule) in a firewall policy that you can then deploy on the device.

Delete IPS Signatures

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select one or more customized IPS signatures and click the delete (trash can) icon

   A warning message appears asking you to confirm the deletion.

3. Click Yes to proceed with the deletion.

   You are returned to the IPS Signatures page and a message indicating the status of the delete operation is displayed.

Related Documentation

• Create IPS Profiles