Add, Modify, And Delete A Rule Group - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 21 Rules

Add, Modify, and Delete a Rule Group

Adding a New Rule Group
To add a rule group follow these steps:
Step 1 Navigate to the Inspection Rules page, as shown in
Figure 21-10
Click Add Group.
Step 2
The Add Group dialog box appears, as shown in
Figure 21-11
Enter the new group name in the Name field.
Step 3
Click the checkboxes of the rules to be added to the new rule group.
Step 4
Tip
Step 5 Click Add.
The selected rules appear in the lefthand pane of the dialog box. To remove a rule from the group,
highlight the item in the lefthand pane and click Remove.
78-17020-01
Inspection Rules Page
Add Group Dialog Box
The dropdown list above the list of rules can limit the display of rules to active system rules,
active user rules, or inactive rules. The search function displays only those rules that match a
search string (for example, "New Malware Traffic Match."). The asterisk wildcard character (*)
is supported.
Figure 21-10.
Figure 21-11.
User Guide for Cisco Security MARS Local Controller
Rule and Report Groups
21-27