Editing an IOA rule

You can edit only custom IOA rules. Rules created by Kaspersky Lab cannot be edited.

When working in distributed solution and multitenancy mode, you can edit only those IOA rules that were created on the current server. Consequently, in the web interface of the PCN, you can edit only the rules that were created on the PCN. In the web interface of an SCN, you can edit only the rules that were created on the SCN.

To edit an IOA rule:

1. In the program web interface window, select the IOC/IOA Analysis section, IOA Analysis subsection.

   The table of IOA rules opens.

2. Select the IOA rule that you want to edit.

   This opens a window containing information about the IOA rule.

3. Make the relevant changes.
4. Click the Save button.

The IOA rule settings will be changed.

See also Viewing the IOA rule table Viewing information about an IOA rule Enabling or disabling an IOA rule Adding an IOA rule Deleting an IOA rule Viewing an IOA white list Viewing information about an IOA rule in the white list Adding an IOA rule to the white list Removing an IOA rule from the white list Viewing the IOA analysis results Filtering and searching IOA rules Clearing an IOA rules filter

Page top