IPS/IDS modification

[PatWruk]

I'm looking at the documentation for the Network Appliance Security Intrusion section, and I see it has included/excluded Cidr. Will that turn off IPS functionality for those ranges? If I add an excluded network do I need to add an included network?

Am I missing documentation on this somewhere? There is very little information on developer.cisco.com that I can find about the additional options.

[ww · Accepted solution]

https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection#Intrus...

Protected Network section is used to controls the IP addresses or subnets of the systems protectied. Entries should be separated by commas or whitespace. This will narrow down the subnets protected, it will protect only the subnets listed.

Note: The Protected Network section is only available for Security Appliances in Passthrough mode.

[PatWruk]

@ww perfect, that's what I was looking for, not sure why I didn't think of looking at the standard docs. Thank you!