I just ran into a snag, I'd like to replace an existing IPS Rules policy for a large number of systems. In our environment, we have 3-4 Rules policies layered, and I just want to replace one of those 3 or 4 with a new iteration. But in the PAR structure, I only see the ability to add a new policy to the layered scheme via multi-slot.
If I go ahead and do that, I'm ok with it as long as I can take action during the same short time-frame to remove the old policy instance throught either the PAR or through another means. Tips?