https://community.cisco.com/t5/network-security/migrating-to-ips-mode/m-p/3016021#M42880 <P>When you say that the rule is making the result "would have been dropped" is that an access control rule, or the actual IDS/IPS policy making that verdict?</P> Wed, 24 May 2017 08:15:46 GMT Dennis Perto 2017-05-24T08:15:46Z https://community.cisco.com/t5/network-security/migrating-to-ips-mode/m-p/3016020#M42878 <P>Hi,</P> <P></P> <P>We are currently running our 8250's in an IDS mode and we are changing to an IPS mode.&nbsp;</P> <P>We have lots of rules which are now resulting in a "would be block", that is going to change to a Block result. To ease the migration I'm looking for ways of slowly moving to Block results.</P> <P>I'm thinking of dividing the 'would be block' rules into groups and changing the the result of those groups initial to monitor and group after group changing the results back to block.</P> <P>Is this a sane idea and if so what is a decent way of dividing the rules into groups?</P> <P></P> <P>Henk Fictorie</P> <P></P> Sun, 10 Mar 2019 13:50:30 GMT https://community.cisco.com/t5/network-security/migrating-to-ips-mode/m-p/3016020#M42878 Henk Fictorie - Ulrich 2019-03-10T13:50:30Z https://community.cisco.com/t5/network-security/migrating-to-ips-mode/m-p/3016021#M42880 <P>When you say that the rule is making the result "would have been dropped" is that an access control rule, or the actual IDS/IPS policy making that verdict?</P> Wed, 24 May 2017 08:15:46 GMT https://community.cisco.com/t5/network-security/migrating-to-ips-mode/m-p/3016021#M42880 Dennis Perto 2017-05-24T08:15:46Z