IPS custom variables are used in custom IPS rules, which are uploaded via the Web UI or the API. This feature is supported on the following appliances:
Central Management release 9.1.3 and later.
Network Security release 9.1.3 and later.
The IPS policy synchronization capability supports custom variables. IPS custom rules configured with IPS custom variables will synchronize successfully across all the managed appliances.
Prerequisites
Operator or admin access
To create an IPS custom variable using the Web UI:
Log in to the Central Management System Web UI.
Navigate to the IPS Custom Rules page.
Click Add.
.png "IPSCustomRule.png")
.png "IPSCustomRule2.png")
Enter the Name of the variable.
A variable name can only have alphanumeric characters, hyphen, and underscore symbols. You can edit a variable even after creating it.
Select the Type from the dropdown list: IP Address or Port Address. The type cannot be modified later.
Enter one of the following:
A valid IPv4 or IPv6 address.
A port number between 1 and 65535.
To add multiple addresses, enter a list of port numbers or IP addresses separated by commas. Port range can also be specified as 1:46. Use a $ prefix to refer to another variable name. You can assign up to 500 values to a single variable.
Click Save to save new variable.
If you want to delete variables, you can click Delete to delete a single variable or click Delete All to delete multiple variables.
If your appliance is managed by a Central Management appliance, enable the Write To Group option in the Central Management Web UI to push the changes to a selected group of appliances managed by the Central Management appliance.