Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring Intrusion Prevention Rules Detection Mode in Apex One Vulnerability Protection

    • Updated:
    • 21 Sep 2021
    • Product/Version:
    • Apex Central
    • Apex One
    • Apex One as a Service
    • Platform:
Summary

The following article presents how to change the Intrusion Prevention Rule detection modes in Apex One Vulnerability Protection.

Details
Public

To change the Intrusion Prevention Rules Detection Mode:

  1. Login to Apex Central.
  2. Go to Policies > Policy Resources > Intrusion Prevention Rules.
  3. Search for the rule to be modified.
  4. Click on Detect Only or Prevent listed under Mode.

    Detect Only or Prevent

    Click the image to enlarge.

  5. On the new window, select the desired mode.

    Mode selection

     
    • Prevent – Blocks the activity that triggered the rule
    • Detect Only – Activity is allowed but is logged
     
  6. Click on Save.
  7. Verify if the Mode has been changed to the desired entry.

    Verify change in Mode

    Click the image to enlarge.

  8. Go to Policies > Policy Management.
  9. Select the associated policy.
  10. Go to the Vulnerability Protection column, and ensure that it is enabled.

    Vulnerability Protection

  11. Scroll down, and click on Deploy.
 
  • Modifying an Intrusion Prevention rule would be in a global scale and not per policy. It would be best to perform observation and testing before performing any changes
  • Apex One (On-Premise) customers need the following product builds to have this feature:
 
Premium
Internal
Partner
Rating:
Category:
Configure
Solution Id:
000287616
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.