Edit, Clone, and Delete IPS Signature Static Groups

Users with the tenant administrator role or a custom role with appropriate IPS tasks can edit, clone, or delete IPS signature static groups.

• Edit IPS Signature Static Groups

• Clone IPS Signature Static Groups

• Delete IPS Signature Static Groups

Edit IPS Signature Static Groups

You can edit only customized IPS signature static groups and not predefined (system-generated) static groups.

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select a customized IPS signature static group and click the edit (pencil) icon.

   The Edit IPS Signature Static Group page appears, displaying the same fields that are presented when you create an IPS signature static group.

3. Modify the IPS signature static group fields as needed. See Create IPS Signature Static Groups.

   Note You can modify all fields except the name.

4. Click OK to save your changes.

   You are returned to the IPS Signatures page and a message that the IPS signature static group was successfully updated is displayed.

If the IPS signature static group was used in an IPS or exempt rule that is deployed on the device (through the firewall policy), then the firewall policy is marked for deployment. You must deploy the firewall policy for the changes to take effect on the device.

Clone IPS Signature Static Groups

Cloning enables you to easily create a new IPS signature static group based on an existing one. You can clone predefined or customized IPS signature static groups and modify the parameters as needed.

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select an IPS signature static group and select More > Clone.

   The Clone IPS Signature Static Group page appears, displaying the same fields that are presented when you create an IPS signature static group.

3. Modify the IPS signature static group fields as needed. See Create IPS Signature Static Groups.
4. Click OK to save your changes.

   You are returned to the IPS Signatures page and a message that the IPS signature static group was successfully created is displayed.

After you clone an IPS signature static group, you can use the static group in an IPS or an exempt rule and reference the IPS profile (containing the rule) in a firewall policy that you can then deploy on the device.

Delete IPS Signature Static Groups

Procedure

1. Select Configuration > IPS > IPS Signatures.

   The IPS Signatures page appears.

2. Select one or more customized IPS signature static groups and click the delete (trash can) icon

   A warning message appears asking you to confirm the deletion.

3. Click Yes to proceed with the deletion.

   You are returned to the IPS Signatures page and a message indicating the status of the delete operation is displayed.