Cisco Cisco FirePOWER Appliance 7115

Version 5.3

Sourcefire 3D System User Guide

2047

Managing System Policies

Configuring a System Policy

Chapter 48

Configuring Access Control Policy Preferences

: Protection

You can configure the system to prompt users for a comment when they add or 

modify a rule in an access control policy, prompting them to enter a rule 

comment. You can use this to track users’ reasons for policy changes. If you 

enable comments on access control rule changes, you can make the rule 

comment optional or mandatory. The system prompts the user for a comment 

when each new change to a rule is saved.
The system adds the comment to the rule’s comment history when the user 

saves the rule. For more information, see 

 on page 789.

To configure the access control policy rule comment settings:

: Admin

1. Select System > Local > System Policy.

The System Policy page appears.

2. You have the following options:

To modify the access control policy settings in an existing system 

policy, click the edit icon (

) next to the system policy.

To configure the access control policy settings as part of a new system 

policy, click Create Policy.
Provide a name and description for the system policy as described in 

 on page 2039, and click Save.

In either case, the Access List page appears.