Regarding IDS/IPS, is there any way to disregard an IP-pair or possibly even IP and/or port pair, or is it always disregard the entire rule altogether? I would assume a hit for a pattern would be accepted for some but possibly mean something more harmful for others.
I always interpretted that as ignoring the rule in question entirely, although I think being able to exempt specific IP addresses or ports rather than the whole rule could be a nifty enhancement 
1 Like