Cisco Cisco Firepower Management Center 4000

You can select the base policy for your intrusion policy and, when your base policy is a default policy 
provided by Cisco, choose whether to allow rule updates to update your base policy on the Base Policy 
summary page. You can also view but not change the default state, enabled or disabled, of preprocessors 
and other advanced features. From this page, you can access the configuration pages for advanced 
features where you can view but not change their default option settings. You can also access a read-only 
display of the Rules page, where you can view the default states of all rules in your base policy, filter the 
display to view subset of rules, and view details of individual rules.

Admin/Intrusion Admin

Select 

.

The Intrusion Policy page appears.

Click the edit icon (

) next to the policy you want to edit.

If you have unsaved changes in another policy, click 

 to discard those changes and continue. See 

 for information on saving unsaved changes in another 

policy.

The Policy Information page appears.

Click 

 on the Policy Information page. 

The Base Policy summary page appears.

Select the Cisco default or custom policy that you want to use as the base policy for your intrusion policy 
from the 

 drop-down list. See 

 for more 

information.

Optionally, select or clear the 

 check box to specify whether you 

want new rule updates to update your base policy.

When you save your changes with the check box cleared and then import a rule update, an 

 

button appears on the Base Policy summary page and the status message on the page updates to inform 
you that the policy is out of date. Optionally, you can click 

 to update your base policy with 

the changes in the most recently imported rule update.

See 

 for more information.

Optionally, take any of the following actions on the page:

To display all rules in your base policy on the Rules page in read-only mode, click 

.

In the read-only display in this page, you can filter the view to display subsets of rules in your base 
policy. You can also display details of individual rules. See 

 for more information.

To view which preprocessors and other advanced features are enabled or disabled in your base 
policy, scroll down the page. See 

 for 

more information.

To display the configuration page and default settings for an advanced feature in read-only mode, 
click 

 next to the feature whose default settings you want to see. For an overview of advanced 

features that you can enable or disable and whose default settings you can modify, see 

.

Save your policy, continue editing, discard your changes, or exit while leaving your changes in the 
system cache. See the 

 table for more information.