Selective IPS Opt-In

Hey Sam,

IPS in UTM9 is very similar to IPS in ASG8. The engine's matured a bunch, and we've gone to some lengths to improve performance, but you still have one IPS policy that applies to everything. You can then create exceptions, to stop traffic to or from certain hosts from being scanned by IPS.

Cheers,

-Alan

My question to AlanT , if we add an IP host object instead of the xyz (network) in the Allowed Local network box then will IPS work for that specific IP host object or will act as deactivated by default?

Thanks

Actually yes, I'd like to know this too (I forgot that this was part of my original question!) :)

Is anyone able to answer the second part of my question:

I note that it is possible to add host objects to the IPS 'Local Networks' configuration, can I use this to 'opt in' vs having to 'opt out'?

That should work, though would be more work to maintain.

That should work, though would be more work to maintain.