Add a Custom Signature List

You can use the default signature list to build your own custom IPS signature lists to fit your organization's specific needs.

Table of Contents

• Prerequisites
• Procedure
• Reset a Signature's Action

Prerequisites

• Full admin access to the Umbrella dashboard. See Manage User Roles.

Procedure

1. Navigate to Policies > Policy Components > IPS Signature Lists and click Add.

2. Enter a name for your custom signature list and choose a default list as a template.

3. Change which signatures are blocked, logged only, or ignored. Click the menu next to the signature you want to move and click Move to Block, Move to Log Only, or Move to Ignore. A prompt appears asking you to confirm your choice.

4. Click Move. The signature you moved is now within the section you chose.

5. Click Save to finish creating your custom signature list.

Reset a Signature's Action

1. Navigate to Policies > Policy Components > IPS Signature Lists.
2. Under Custom IPS Signature Lists, click the list you want to edit. The list expands.

3. Click the More Actions menu and click View Overrides to view the list of signatures that have been moved.

4. Click the More Actions menu and click Edit List. Locate the signature you want to reset and click Reset to System Default in the More Actions menu for that signature. A prompt appears asking you to confirm your choice.

5. Click Move. The signature you reset is now set back to its original action from the default list your custom list is based on.

6. Click Save to finish editing your custom signature list.

---

Manage IPS < Add a Custom Signature List > Delete a Custom Signature List