Skip to main content
Phuoc_Ngo
Phuoc_Ngo
New Member
February 12, 2010
Question

IP Exclusion from IPS/IDS

  • February 12, 2010
  • 2 replies
  • 6360 views
How do we exclude a certain IP from IPS/IDS sensor or rules? Any assistance would be greatly appreciated. Thanks,

    2 replies

    abelio
    SuperUser
    abelio
    SuperUser
    February 12, 2010
    Add to your sensor one custom override for the same signature/s and define there your exempt IP number/s
    Phuoc_Ngo
    Phuoc_NgoAuthor
    New Member
    February 12, 2010
    Thanks Abel, The problem is what we want to exclude this IP address from all policies. This is our dilemma, since we have individual IPS sensors for each policy.
    abelio
    SuperUser
    abelio
    SuperUser
    February 12, 2010
    another approach: define a new policy for this IP, configure the IPS sensor you need for it, put that specific policy above all policies with similar src/dst and the firewall will take care of that exception executing this policy before the other ones.
    Terms & ConditionsAccessibility statement