Cisco Cisco Firepower Management Center 4000

Select 

,

then select the 

 tab.

The Rule Management page appears.

If the rule is in a rule group, click the group name to expand the group.

Next to the rule you want to delete, click the delete icon (

).

Confirm that you want to delete the rule.

The rule is deleted.

Any

Create rule groups to help you organize correlation rules. The FireSIGHT System ships with many 
default rules, which are grouped according to function. For example, the Worms rule group comprises 
rules that detect activity by common worms. Note that rule groups exist only to help you organize 
correlation rules; you cannot assign a group of rules to a correlation policy. Instead, add each rule 
individually.

You can add a rule to an existing group when you create the rule. You can also modify an existing rule 
to add it to a group. For more information, see the following sections:

 

To delete a rule group, click the delete icon (

) next to the group you want to delete. When you delete 

a rule group, rules that were in the group are not deleted. Rather, they merely become ungrouped

Admin/Discovery Admin

Select 

,

then select the 

 tab.

The Rule Management page appears.

Click 

.

The Create Group page appears.

In the 

 field, type a name for the group.

Click 

.

The group is added.

Any