cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
292
Views
0
Helpful
1
Replies

Deleting rule in MARS

networker99
Level 1
Level 1

How do you delete an inspection rule in MARS

1 Reply 1

pmccubbin
Level 5
Level 5

Hi Lewis,

The inspection rules cannot be deleted. They can only be made inactive.

The original reasoning was that if you were doing some forensic investigation and a rule was no longer on the system then the database would be corrupt.

You are not the first person to ask for this and I believe Cisco is considering this feature request.

In the meantime, when you need to make a change to a rule just clone the original and then make the original inactive. In this way if you make a mistake you can make this rule inactive. You can then clone the original rule again and fine tune what you are trying to accomplish.

Hope this helps.

Paul

Review Cisco Networking products for a $25 gift card