Default IPS policies

They are there for you to modify or clone to make your own versions.

Ian

that doesn't answer my question though.

Hello, cryptochrome,

The IPS policy listed is recommended IPS policy based on our recommendation. E.g LAN to WAN would have some set of signatures which are useful and DMZ to WAN would have more signatures and strict policy implemented based on the security protection needed.

There are many signatures and their use of each circumstance e.g communication between LAN to DMZ network is different than LAN to WAN so the signatures would vary accordingly.

Thanks. But I was more looking for an answer that explains why there are additional policies apart from the built in ones. The additional ones can be edited, I get that, but all four of them contain the exact same rule and activated signatures. Their only difference is the name. And the rule names indicate they have been migrated from the built-in default policies. All of that makes no sense. 

Thanks. But I was more looking for an answer that explains why there are additional policies apart from the built in ones. The additional ones can be edited, I get that, but all four of them contain the exact same rule and activated signatures. Their only difference is the name. And the rule names indicate they have been migrated from the built-in default policies. All of that makes no sense.