IP Exclusion from IPS/IDS

[Phuoc_Ngo]

How do we exclude a certain IP from IPS/IDS sensor or rules? Any assistance would be greatly appreciated. Thanks,

[abelio]

Add to your sensor one custom override for the same signature/s and define there your exempt IP number/s

[Phuoc_Ngo]

Thanks Abel, The problem is what we want to exclude this IP address from all policies. This is our dilemma, since we have individual IPS sensors for each policy.

[abelio]

another approach: define a new policy for this IP, configure the IPS sensor you need for it, put that specific policy above all policies with similar src/dst and the firewall will take care of that exception executing this policy before the other ones.