As it is now, whenever new IPS rules are added they are marked as 'warn' and added to the configuration. Unless something being blocked by the new rule is desired (not too common), one has to log into the ASL box and modify each new rule to their desired setting. It would be nice if there was an option to change the default rule setting so that as new rules are added via updates they are preconfigured for 'drop' or one of the other options as desired.
This thread was automatically locked due to age.