IMPORTANT: The SMS restricts the number of IP addresses used in filter exceptions, restrictions, and quarantined access for a profile to 65,536. If a profile exceeds this limit, you cannot distribute it. This limit promotes better system performance. Saving and distributing too many filter changes to a device simultaneously can cause problems.
How To: Add a Filter Exception
- Log in to the SMS from a client.
- From the top navigation pane, click Profiles. The Profiles screen displays.
- From the navigation pane on the left, click the + sign next to the Inspection Profiles to expand the category.
- From the navigation pane on the left, locate and expand the Profile you will be working with.
- Perform a search for the filters you wish to create an exception for.
- Select a filter(s).
- To add an exception, do one of the following:
- Click Add Exception.
- View the selected filter and click Add in the Exceptions section.
- Right-click the selected filter and choose Add Exception.
- The Create or Edit Exception dialog box displays.
- Enter a Name for the exception.
- For the Src IP Address, enter an IP address. Select the format for the address: CIDR, IP Mask, or Any IP.
- For the Dest IP Address, enter an IP address. Select the format for the address: CIDR, IP Mask, or Any IP.
- Click OK.
- You can also click Distribute to distribute the change.
- Click OK.
How To: Remove Filter Exception
- Select and open a filter.
- In the Exceptions section, select an exception to remove.
- Click Remove.
- You can also click Distribute to distribute the change.
Reference: SMS User Guide