Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


About the IPS Policies Page

You are here: Security Services > IPS > Policies.

An intrusion prevention system (IPS) policy defines how your device handles the network traffic. It allows you to enforce various attack detection and prevention techniques on traffic traversing your network. You can define policy rules to match a section of traffic based on a zone, network, and application, and then take active or passive preventive actions on that traffic.

Tasks You Can Perform

You can perform the following tasks from this page:

  • Import predefined policies. See Import IPS Predefined Policies.

  • Set an IPS policy as default policy. To do this, select an existing IPS policy and click More > Set Default.

  • Create an IPS policy. See Add an IPS Policy.


    IPS policies that are created by root users in root-logical-system are not displayed in security profile advanced settings if you have logged in as a logical system user.

  • Edit an IPS policy. See Edit an IPS Policy.

  • Delete an IPS policy. See Delete an IPS Policy.

  • Clone an IPS policy. See Clone an IPS Policy.

  • Add rules to the IPS policy. See Add Rules to an IPS Policy.

  • Edit an IPS policy rule. See Edit an IPS Policy Rule.

  • Delete an IPS policy rule. See Delete IPS Policy Rule.

  • Search a policy. To do this:

    1. Click the search icon in the top right corner of the IPS Policies table.

    2. Enter the policy name that you want to find and click the search icon.

      Based on your input, a list of matching policies appears.

  • Show or hide columns in the IPS Policies table. To do this, click the Show Hide Columns icon in the top right corner of the IPS Policies table and select the options you want to view or deselect the options you want to hide on the page.

Field Descriptions

Table 1 describes the fields on the IPS Policies page.

Table 1: Fields on the IPS Policies Page



Policy Name

Displays the IPS policy name.


Displays the number of rules that are configured for the policy or allows you to add new rules to the policy.

Predefined or Custom

Displays if the IPS policy is a predefined or a custom policy.


This option is not available for logical systems and tenants.