Create A Signature Override

You can only create signature overrides for IPS rules that are already triggered on an FDM-managed device. When you create a signature override in CDO, the override is automatically applies the configured action (Drop, Alert, Disabled, Default) to all of the policy levels.

Procedure

Step 1

From the main navigation bar, click Monitoring> Threats.

Step 2

Select a threat from the table and expand it. In the Tune Actions pane, click Tune.

Step 3

Tune the rules as described in step 4 in the Firepower Intrusion Policy Signature Overrides procedure.

Step 4

Review and deploy now the changes you made, or wait and deploy multiple changes at once.