Adaptive filtering works by monitoring each filter to identify any suspected of causing congestion. When it identifies a filter, it manages the filter using one of the following methods, depending on how the global or filter-level Adaptive Filtering is configured:
Automatic Mode: This setting enables the IPS device to automatically disable and generate a system message regarding the defective filter.
Manual: This setting enables the IPS device to generate a system message regarding the defective filter. However, the filter is not disabled.
You can configure the global settings for the adaptive filtering. At the filter level, you have the option to disable AFC so that a filter is never impacted by Adaptive Filter settings on the device. You can view the effects of Adaptive Filter Configuration in the table, which displays the filters most recently affected by the Adaptive Filter. You can also manage the global AFC and the filter-level configuration.
IPS LSM: (IPS > Preferences > Adaptive Configuration Settings)
TPS LSM: (Reports > Security > Adaptive Filter Control)
How to Reset a filter from the SMS
Re-enabling a filter that has been disabled due to AFC involves a two step process;
1. Disable the filter in the profile and then distribute the profile
2. Enable the filter in the profile and then distribute the profile