Views:
The following example illustrates how to manually assign recommendation scan results for Intrusion Prevention:

Procedure

  1. After a recommendation scan is complete, open the computer page.
  2. Go to Intrusion Prevention General. Any unresolved recommendations appear in the Recommendations section.
  3. Click Assign/Unassign to open the rule assignment window.
  4. Sort the list of the recommended, unassigned rules By Application Type.
  5. Select Recommended for Assignment.
    • Recommended rules have a rectangular, or full, flagrecommended_rule=742536c9-8d92-4aee-a011-b5f28bd21911.png.
    • A triangle or partial flag partially_recommended_rule=6a1638a0-9aff-4c62-af91-350a0a5548e2.png indicates that only some of the rules for the application type are recommended.
  6. To assign a single rule to a computer, select the box next to the rule name.
    • Rules with warning=d06f9df2-e048-4662-b868-c7a35d66473c.png have settings that you must configure before enabling the rule.
      For example, some log inspection rules require the location of the log files. The computer where the recommendation occurs displays an alert. The text of the alert contains the information required to configure the rule.
    • Rules with dpi_rules_option=511d258c-f1ad-4da1-bd62-899ab5376ac0.png have configuration options that you can set.
  7. To assign several rules at once:
    1. Select multiple rules.
      • To select a group of rules next to each other, press and hold the Shift key.
      • To select separated rules, press and hold the Control key.
    2. Right-click the selection.
  8. Click Assign Rule(s).