Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 448

Rule and Report Groups
Click Submit.
Step 6
The new rule group name appears in the Group dropdown filter on the Inspection Rules page, as shown
in Figure
user-created rule group, the rule group name appears without the prefix "System." You can also click
Cancel to return to the Inspection Rules page without creating a new rule group.
Figure 21-12
Modifying a Rule Group
To edit a rule group, follow these steps:
Navigate to the Inspection Rules page, as shown in
Step 1
Select the rule group to edit in the Group pulldown filter.
Step 2
Click Edit Group.
Step 3
The Add Group dialog box appears, as shown in
field, and the included rules appear as selected rules in the lefthand pane of the dialog box.
To add additional rules, click the checkbox of all the rules to be added to the group, then click Add.
Step 4
To remove rules, highlight the items in the lefthand pane to remove, then click Remove.
Click Submit.
Step 5
Deleting a Rule Group
Navigate to the Inspection Rules page, as shown in
Step 1
Step 2 Select the rule group to delete in the Group pulldown filter.
Step 3 Click Delete Group.
The Delete Group dialog box appears listing the rules in the group to be deleted. You are prompted to
confirm deletion.
User Guide for Cisco Security MARS Local Controller
21-28
21-12. In this example, the new rule group name is "Example Group." Because it is a
New Rule Group Appears on the Dropdown List of the Inspections Rules Page
Figure 21-10.
Figure 21-11. The rule group name appears in the Name
Figure 21-10.
Chapter 21 Rules
78-17020-01