Creating IPS Signature Static Groups

Use the IPS Signature Static Group page to configure a specific, finite set of attack objects or groups.

Static groups require more maintenance than dynamic groups because you must manually add or remove attack objects in a static group to change its members.

Use an IPS signature static group for the following tasks:

Before You Begin

Procedure

To configure an IPS signature static group:

  1. Select Configure > IPS Policy > Signatures.
  2. Click Create.
  3. Select Static Group.
  4. Complete the configuration according to the guidelines provided in the Table 210.
  5. Click OK.

A new IPS signature static group with the predefined configurations is created. You can use this signature in IPS policies.

Table 210: IPS Signature Static Group Settings

 

Settings

Guidelines

Name

Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. No spaces are allowed and the maximum length is 63 characters.

Group Members

Add or delete group members of a static group.

Group members include custom groups whose members are predefined attacks, predefined attack groups, custom attacks, or custom dynamic groups.

A custom group defines:

  • A specific set of critical attack objects that you know your network is vulnerable against.

  • A specific set of informational attack objects that you need to stay aware of events on your network.

Add IPS Signatures

IPS Signatures

Select one or more available IPS signatures to include in a static group.