Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Edit, Clone, and Delete an IPS Signature

You must have the tenant administrator role or a customized role assigned with the appropriate IPS tasks to modify customized IPS signatures.

Edit an IPS Signature

You can edit only customized IPS signatures and not predefined (system-generated) signatures.

To edit a customized IPS signature:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select a customized IPS signature, and click the edit (pencil) icon.

    The Edit IPS Signature page opens.

  3. Modify the IPS signature fields. See Create an IPS Signature.
    Note:

    You cannot modify the name of the IPS signature.
  4. Click OK to save your changes.

    The IPS Signatures page opens with a message that the IPS signature was successfully updated.

    If the IPS signature was used in an IPS rule or exempt rule that is deployed on the device through the firewall policy, then the firewall policy is marked for deployment. You must deploy the firewall policy for the changes to take effect on the device.

Clone an IPS Signature

Cloning enables you to easily create an IPS signature based on an existing one. You can clone predefined or customized IPS signatures and modify the parameters.

To clone an IPS signature:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select an IPS signature, and select More > Clone.

    The Clone IPS Signature page opens.

  3. Modify the IPS signature fields. See Create an IPS Signature.
  4. Click OK to save your changes.

    The IPS Signatures page opens with a message that the IPS signature was successfully created.

    You can use the cloned IPS signature in an IPS rule or an exempt rule. You can then reference the IPS profile containing the rule in a firewall policy, which you can deploy on the device.

Delete IPS Signatures

Note:

You can delete only customized (user-created) IPS signatures that are not used in an IPS or exempt rule. You cannot delete predefined (system-generated) IPS signatures.

To delete the customized IPS signatures:

  1. Select SRX > Security Subscriptions > IPS > IPS Signatures.

    The IPS Signatures page opens.

  2. Select one or more customized IPS signatures, and click the delete (trash can) icon.

    A warning message asking you to confirm the deletion is displayed.

  3. Click Yes.

    The IPS Signatures page opens with a message indicating the status of the delete operation.