cancel
Showing results for 
Search instead for 
Did you mean: 
mjw3428
Level 8

Create more than 15 exceptions to IPS Client Rules


Hi all,

I realize there are probably reasons why you can only create 15 exceptions for IPS Client Rules at a time, but is there any way around this limit?

Is there a tool or script that will enable you to approve several pages of exceptions at once?

Regards

Matt

0 Kudos
3 Replies
fitchsoccer342
Level 13

Re: Create more than 15 exceptions to IPS Client Rules

How are you trying to setup your exceptions? Are you going into the Exception Rules and then trying to add tons of signatures into one exception rule?

0 Kudos
mjw3428
Level 8

Re: Create more than 15 exceptions to IPS Client Rules

Hi,

I am using the EPO Console and selecting Reporting > Host IPS 8.0 then the relevant OU and IPS Client Rules. Within here I can see the exceptions being created by adaptive mode and then select the ones I want to turn into a policy.

I have a large number that I am trying to get into a single policy, but don't seem to be able to select more than 15 at a time.

0 Kudos
fitchsoccer342
Level 13

Re: Create more than 15 exceptions to IPS Client Rules

So if I am understanding this right, you have a IPS policy where it is in adaptive mode. And you want to add a bunch of signatures that are being blocked, as exception rules to this policy, correct? Under the the IPS Client Rules page, you don't have the option to "select all in all pages" after filtering for the ones you want? Or do you not want all of those as exceptions?

I guess also, If you know all the signature ID's, you can write a query, specifiy those signatures, then when you get the results just highlight them all, and Actions > Make Exceptions and find the policy you want to apply them to.

0 Kudos