Cisco Cisco FirePOWER Appliance 8260
32-108
FireSIGHT System User Guide
Chapter 32 Understanding and Writing Intrusion Rules
Filtering Rules on the Rule Editor Page
Step 5
Type your filter constraints and press Enter.
Your filter can include keywords and arguments, character strings with or without quotes, and spaces
separating multiple conditions. See
separating multiple conditions. See
for more
information.
The page refreshes to display any group that contains at least one matching rule.
Step 6
Optionally, open any folder not already opened to display matching rules. You have the following
filtering choices:
filtering choices:
•
To enter a new filter, position your cursor inside the filter text box and click to activate it; type your
filter and press Enter.
filter and press Enter.
•
To clear the current filtered list and return to the original, pre-filtered page, click the filter clearing
icon (
icon (
).
Step 7
Optionally, make any changes to the rule that you would normally make on the page. See
To put any changes you make into effect, apply the intrusion policy part of an access control policy as
described in
described in
.