Setting Drop Behavior in an Inline Deployment

Procedure

Step 1	Choose Policies > Access Control > Intrusion.
Step 2	Click Snort 2 Version next to the policy you want to edit. If View () appears instead, the configuration belongs to an ancestor domain, or you do not have permission to modify the configuration.
Step 3	Set the policy’s drop behavior: Check the Drop when Inline check box to allow intrusion rules to affect traffic and generate events. Clear the Drop when Inline check box to prevent intrusion rules from affecting traffic while still generating events.
Step 4	Click Commit Changes to save changes you made in this policy since the last policy commit. If you leave the policy without committing changes, changes since the last commit are discarded if you edit a different policy.