Kaspersky Anti Targeted Attack Platform

Removing user-defined sets of Intrusion Detection rules

You can delete all user-defined Intrusion Detection rule sets that were uploaded into the application from files. Selecting which user-defined rule sets to delete is not possible. If you want to use only some of the current rule sets in the application, you can copy the files with these sets to a separate folder and replace all user-defined rule sets with rule sets from this folder.

Only users with the Senior security officer role can delete user-defined Intrusion Detection rule sets.

To delete user-defined Intrusion Detection rule sets:

  1. In the window of the application web interface, select the Custom rules section, Intrusion detection subsection.
  2. In the toolbar, click the Delete all user-defined rules button.
  3. In the confirmation window, click OK.

    This opens a window for selecting the folder with Intrusion Detection rule files.

All user-defined Intrusion Detection rule sets are deleted from the table.