Rules Reset Feature - IDS Policy Manager v2 Feature Requests

Forum IDS Policy Mana... IDS Policy Mana... Rules Reset Feature

4/12/2007 1:16 PM

	cx
17 posts

Rules Reset Feature

Heya Jeff,

I noticed that when rules get deleted from the VRT snort rulesets that they don't get removed from the IDSPM DB. I was wondering if you could add a feature that would allow the user to effectively reset the rules to current Snort rules (call it a ruleset cleanup or something). Additionally you could add a feature to re-sync the rulesets to check which rules have been removed and remove them from the IDSPM database.

Thanks

Craig

4/17/2007 12:34 PM

	Jeff Dell
219 posts
www.activeworx.com

Re: Rules Reset Feature

This sounds like a great idea. It is something that I have been waiting to add for some time, but just don't have the time at the moment. I am finishing up another project and then hope to spend some time knocking out the new release of IDSPM.

Cheers,

Jeff

6/4/2007 3:30 PM

	Jeff Dell
219 posts
www.activeworx.com

Re: Rules Reset Feature

This feature has been added to v2.1 Beta 1. Open the settings for and select 'Remove Old Rules'. When this feature is enabled it will default to removing all old rules when updating a policy. This will work on any rule set you update, not just VRT rules.

Cheers,
Jeff

Page 1 of 1

Forum

IDS Policy Mana...

Rules Reset Feature