IPS Global Exceptions and Custom Policy

[NeilDavey]

Good Morning

We have a quick question around IPS Global Exceptions and the Custom Policy if possible?

At present, we have 2 IPS Global Exceptions in place.

We plan to move the 1st rule from Global Exceptions to Custom Policy.  As this bypasses IPS, we will just create a new IPS Profile and unselect IPS Blade.  We will then match the rule from Global Exceptions into the Custom Policy and then delete it from Global Exceptions.

This should then be a like for like exception.

The 2nd rule, as we have limited this to be 1 particular protection, we cannot be this granular under a Custom Policy.

We could move it into a Custom Policy but then have to bypass all IPS.  This is not a preferred setup.

Or we just leave the 2nd rule still in the Global Exceptions.

The question we have is, are we still able to have some rules in Custom Policy and more granular rules within the Global Exceptions?

We think this is possible and an approved setup but I was just looking for any further advice or opinions?

Thanks

[PhoneBoy]

You can mix/match custom policy and global exceptions as needed, to the best of my knowledge.