Configures an alert policy exception for a single signature ID.
Syntax
policymgr signature id <sigID> interface {<portPair> | ALL | MGMT} src {<srcIP>/<prefix> | any} dst {<dstIP>/<prefix> | any} action <actionType>
Parameters
<sigID>
Configure an exception to the alert rule specified by the eight-digit signature ID.
interface {<portPair> | ALL | MGMT}
Apply the exception to traffic through the specified appliance interface:
<portPair>—Traffic through the specified monitoring port pair. See the Hardware Administration Guide for your appliance.ALL—Traffic through all monitoring port pairs.MGMT—Traffic through the appliance management interface.
src {<srcIP>/<prefix> | any | any-v6}
Apply the exception to traffic with the specified source.
<srcIP>/<prefix>—Traffic with the specified source IPv4 or IPv6 host or subnet, specified in CIDR format. Example:10.128.45.154/32<any>—Traffic with any source IPv4 address.<any-v6>—Traffic with any source IPv6 address.
dst {<dstIP>/<prefix> | any | any-v6}
Apply the exception to traffic with the specified destination.
<dstIP>/<prefix>—Traffic with the specified destination IPv4 or IPv6 host or subnet, specified in CIDR format. Example:172.217.27.36/32<any>—Traffic with any destination IPv4 address.<any-v6>—Traffic with any source IPv6 address.
<actionType>
Take the specified action on matched traffic: Block, UnBlock, Suppress, Suppress & Unblock, or Default. For details, see "Alert Policy Exception Actions" in the Network Security User Guide.
Example
This example configures an alert policy exception for the alert rule specified by signature ID 93000001. The exception applies to traffic through the appliance monitoring port pair A, with the 10.128.45.154/32 subnet source and the 172.217.27.36/32 subnet destination. For matched traffic, blocking is disabled.
hostname (config) # policymgr signature id 93000001 interface A src 10.128.45.154/32 dst 172.217.27.36/32 action unblock
User role
Operator or Admin
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Release 9.0.2