Exception Handling Settings When Using the Same Profile

[TSOL]

Dear Team

Currently, we manage three GWs(R81.20) with a single SMS(R81.20) and use the same IPS profile across multiple policy sets.

We need to apply an IPS exception to only one of the GWs. However, in SmartConsole, it seems that exceptions must be configured individually for each IPS protection.

Is there a way to apply the exception in bulk, rather than configuring each IPS protection one by one?

Thank you in advance

[PhoneBoy]

How many IPS Signatures are you setting an exception on?

[TSOL]

Thank you for reply.
There are approximately About 50  need to be changed.

[PhoneBoy]

Rather than modify the individual protections, create an exception rule in your Threat Prevention policy.
Something like the following (these protections were random and HQgw is the specific gateway I want the exclusion on):

[the_rock]

Interesting...let me test this in the lab tomorrow.

Andy

[the_rock]

I attached what I believe you are referring to, but please correct me if Im wrong?

Andy

[Tal_Paz-Fridman]

Hi @the_rock what you show will translate to a rule like the one @PhoneBoy showed with the specific Security Gateway enforcing the exception.

[the_rock]

makes sense.