You can remove from exclusions a single IDS rule, multiple rules, or all rules at the same time.
To remove an IDS rule from exclusions:
This opens a window containing information about the rule.
This opens the action confirmation window.
The rule is removed from exclusions. The rule is no longer used for creating alerts.
To remove all or multiple IDS rules from exclusions:
You can select all rules by selecting the check box in the line containing the headers of columns.
This opens the action confirmation window.
The selected rules are removed from exclusions. The rules are no longer used for creating alerts.
Users with the Security auditor role cannot remove IDS rules from exclusions.
Users with the Security officer role do not have access to the IDS exclusion list.