Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 5800 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to modify IPS custom Policies?

MatteoGalvani

Hi all, I have seen that IPS is blocking some packets because of an ips signature. I have seen in the ips log that the signature is the "2100625"     Shell.Explorer ActiveX Object Access.

I have done a copy of the standard LAN TO WAN Ips policy and tried to edit removing this signature.... I'm really don't find anywhere this signature or description...
Some one can help me and teach how to do this? Thank you very much.

Matteo



This thread was automatically locked due to age.
  • 0

    Hi,

    Create a new IPS policy, go to Objects > Policies > Intrusion Prevention. Click on the configured IPS policy and click Add. On the screen, select "Select Individual Signature" option and search for IPS signature which needs to be allowed. Configure Action as allow packet and save the policy.

    If you do not find the specific signature try searching it in the IPS logs in log viewer and post them here.

    Thanks