assign function ips

Function

The assign function ips command enables intrusion prevention on a virtual system.

The undo assign function ips command disables intrusion prevention on a virtual system.

assign function ips

undo assign function ips

None

Management view of the virtual system

2: Configuration level

By default, intrusion prevention is enabled on a virtual system.

If intrusion prevention is disabled on a virtual system:

The intrusion prevention profile-related configurations become invalid, but the system reserves all configurations. You can use display-related commands to view these configurations.

You can delete existing intrusion prevention profiles (excluding the default profiles) but cannot create, clone, or modify intrusion prevention profiles.
If the virtual system administrator has accessed the intrusion prevention profile view when the root system administrator disables intrusion prevention on the virtual system, the configurations in the intrusion prevention profile view cannot be modified. The virtual system administrator cannot access the intrusion prevention profile view after exiting the view. To be specific, the system does not allow any modification of the existing intrusion prevention profile.

# Disable intrusion prevention on virtual system vsys1.

<sysname> system-view
[sysname] vsys name vsys1
[sysname-vsys-vsys1] undo assign function ips