Operation: | Add IPS policy / Update IPS Policy
Description: | To Create/Edit IPS Policy for viewing IPS Signatures and configuring the handling of Signatures.

Sample Configuration
    	<IPSPolicy>
    	<Name>Name</Name>
    	<Description>Text</Description>
    	<Template>Name of IPS policy</Template>
    	<!-- if template is selected all rules of that template to be inherited and add following if mentioned. if template is not selected only following rules -->
    	<RuleList>
    		<Rule>
    		<RuleName>Rulename</RuleName>
    			<RuleType>Custom Signature/Default Signature</RuleType>
    			<SignaturSelectionType>All Application/Individual Application</SignaturSelectionType>
    			<CategoryList>
    				<Category>All Categories/{Categoryname}</Category>
    			</CategoryList>
    			<SeverityList>
    				<Severity>All Severity/{Severityname}</Severity>
    			</SeverityList>
    			<PlatformList>
    				<Platform>All Platform/{Platformname}</Platform>
    			</PlatformList>
    			<TargetList>
    				<Target>All Target/{Targetname}</Target>
    			</TargetList>
    			<SignatureList>
    				<Signature>{SignatureName}</Signature>
    			</SignatureList>
    			<Action>Allow Packet/Drop Packet/Disable/Drop Session/Reset/Bypass Session/Recommended</Action>
    		</Rule>
    	</RuleList>
    </IPSPolicy>

Attribute/Parameter Information :

Parameter | Mandatory | Default | Description
--- | --- | --- | ---
Name | Yes |  | Description: Specify a name for the IPS Policy. Name confines to: Type is 'SCALAR'. Datatype is 'STRING'. Comma (,) is not allowed. Maximum characters allowed are 60. UTF-8 character(s) are allowed.
Description | No |  | Description: Specify description for IPS Policy. Description confines to: Type is 'SCALAR'. Datatype is 'STRING'.
Rule Name | Yes |  | Description: Specify rule name of IPS Policy. Rule Name confines to: Type is 'ARRAY'. Datatype is 'STRING'. Maximum characters allowed are 70. Multiple values are allowed. Duplicate values will be ignored.
action | Yes |  | Description: Select the action to perform when matching traffic pattern is detected. action confines to: Type is 'ARRAY'. Datatype is 'STRING'. Only '0', '1', '2', '3', '4', '5', '6', '7' are allowed. Multiple values are allowed. Duplicate values will not be ignored.
Select all List of Matching Signature | Yes |  | Description: Select all the Signatures in the list for defining global action. Select all List of Matching Signature confines to: Type is 'ARRAY'. Datatype is 'STRING'. Only '0', '1' are allowed. Multiple values are allowed. Duplicate values will not be ignored.
Individual Matching Signature | No |  | Description: Select individual Signature in the Category for defining action. Individual Matching Signature confines to: Type is '2DARRAY'. Datatype is 'STRING'.
Category | No |  | Description: Category under which the IPS Signature falls. Category confines to: Type is '2DARRAY'. Datatype is 'STRING'.
Severity | No |  | Description: Severity level of the Signature. Severity confines to: Type is '2DARRAY'. Datatype is 'STRING'.
Platform | No |  | Description: Platform list by id used in filter Platform confines to: Type is '2DARRAY'. Datatype is 'STRING'.
Target | No |  | Description: Target list by id used in filter Target confines to: Type is '2DARRAY'. Datatype is 'STRING'.
Rule Type | Yes |  | Description: Rule type list. (Default rule list or Custom rule list) Rule Type confines to: Type is 'ARRAY'. Datatype is 'STRING'. Only '0', '1' are allowed. Multiple values are allowed. Duplicate values will not be ignored.

Status Message Information :

Operation | Status | Message
--- | --- | ---
Update IPS Policy | 200 |
Update IPS Policy | 500 |
Update IPS Policy | 502 |
Add IPS policy | 200 |
Add IPS policy | 500 |
Add IPS policy | 502 |
Add IPS policy | 522 |
Add IPS policy | 505 |

) Copyright 2017 Sophos Limited. All rights reserved.
Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.