Self-Defined Policy

Under Self-Defined Policy, you can view all the events you have modified and further edit the actions according to your needs.

To view self-defined policies:

  1. Go to Self-Defined Policy > Policy, and check the list of policies you have modified.
  2. Under Class, the policies are shown as Enabled or Disabled. Under Signature, policies are arranged in the order of Drop > Alert > Do nothing instead of the chronological order of your modifications.

To find specific policies:

  1. Go to Self-Defined Policy > Policy.
  2. Enter keywords in the search bar to find the matching policies.

To edit specific policies:

  1. Go to Self-Defined Policy > Policy and find your target policy.
  2. Click on the policy and click Edit or double-click on the policy.
  3. Change the Action from the drop-down menu (Alert/Drop/Do nothing) and the Source/Destination IPs to set the conditions for future matches. You can also add notes to the Comment box for future management.
  4. Click OK to save the changes.

To delete specific policies:

  1. Go to Self-Defined Policy > Policy and find your target policy.
  2. Click on the policy, and then click Delete.

To view classes and signatures:

  1. Go to Self-Defined Policy > Class/Signature. Each signature is classified according to the Event Type and thus listed under the corresponding Class.
  2. Double-click on the class you wish to view for more information.
  3. Enter keywords in the top search bar to find the matching signatures, or specify the criteria to show the information you wish to view.

To enable/disable classes:

  1. Go to Self-Defined Policy > Class/Signature.
  2. Tick/untick the Enabled in the upper-left corner to enable/disable a class. All the included signatures will be enabled/disabled at once.
  3. Click Save to save the changes.

To change actions of specific signatures:

  1. Go to Self-Defined Policy > Class/Signature.
  2. Double click on your target class.
  3. Chose Alert, Drop, or Do Nothing from the drop-down menu on the left.
  4. Click OK to save the changes.

To change signature actions in batch mode:

  1. Go to Self-Defined Policy > Class/Signature.
  2. Select your target class and click Edit or double-click on the class.
  3. Click the Batch Setting button in the appearing window.
  4. Choose between Apply to enabled signatures only and Apply to all.
  5. Choose Alert, Drop, or Do nothing from the drop-down menu.
  6. Click OK > OK to save the changes.