ips_filter

Important:

  • This command is intended only for Centrally Managed 1500 appliances.

  • On Locally Managed 1500 appliances, you configure this feature in WebUI > Device > Advanced Settings > in the parameter "IPS engine settings - Apply filter".

Description

This command limits the number of IPS protections that can run on the appliance.

When this feature is enabled (this is the default), IPS protections consume less memory on the appliance.

Syntax

ips_filter { on | off }

Procedures

  1. Connect to the command line on the appliance.

  2. If your default shell is the Expert mode, go to Gaia Clish:

    clish

  3. Enable the IPS Filter:

    ips_filter on

  4. Go to the Expert mode:

    • If your default shell is the Expert mode, run:

      exit

    • If your default shell is Gaia Clish, run:

      expert

  5. Examine the current state of the IPS Filter:

    pt ipsEngineSettings | grep applyIpsFilter

    The output must show:

    applyIpsFilter = true

  1. Connect to the command line on the appliance.

  2. If your default shell is the Expert mode, go to Gaia Clish:

    clish

  3. Disable the IPS Filter:

    ips_filter off

  4. Go to the Expert mode:

    • If your default shell is the Expert mode, run:

      exit

    • If your default shell is Gaia Clish, run:

      expert

  5. Examine the current state of the IPS Filter:

    pt ipsEngineSettings | grep applyIpsFilter

    The output must show:

    applyIpsFilter = false