Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

SSIM 4.6 UI - how to enable/disable many rules simultaneously?

Created: 14 Nov 2008 • Updated: 23 May 2010 | 4 comments
lukaszfr's picture

Hello,

I'm using SSIM 4.6 and I want I'm wondering why is not possible to enable/disable more than one correlation rule at the same time? In older releases incl. 4.5.x I could use CTRL key and enable/disable many rules simultaneously. In SSIM 4.6.x it is possible to enable only ONE rule.... For those who manipulate dozens of rules it must be quite irritating.

Is it possible to change this in the nearest future (hotfix etc.)?

Regards,
Antilles

Comments 4 CommentsJump to latest comment

lukaszfr's picture

Does anybody suffer the same problem??
Is it possible to back to old SSIM 4.5 UI behaviour on this matter??

Gary Bishop's picture

If you select or deselect several rules by checking or unchecking the "box" to the left of the rule name....they will all appear when you "Deploy to Server" - I believe this accomplishes what you want sans highlighting multiple items at once...

lukaszfr's picture

Yes, by clicking EVERY box I am able to switch on many rules, but I meant something else.... Just imagine now that you have 400 rules divided in, let say, 4 rule catalogues and now you want to enable part of those rules placed in one of these catalogues. You must click 100 times because you must click on EVERY rule to enable it.... Is it effective?

In SSIM 4.5 console I can check only first rule in the catalogue, then hold SHIFT key and click on the last rule in this catalogue, and then all those rules are marked and I can click only ONCE the 'Enable' button on the menu and voila, 100 rules are swiched on and ready to deploy.

So, for example, when you have 400 rules and you are manipulating those rules continuously then you must:
- in SSIM 4.5 click ONCE after marking specific rules or set rules using CTRL/SHIFT keys
- in SSIM 4.6 click DOZENS or HUNDREDS of times because you need to click on EVERY rule separately....

Great usability :(


Regards,
Antilles

Gary Bishop's picture

I'll see if that feature was somehow was disabled by mistake and will be put back in. I would say that your use case is not typical for sure, and that is why no one else has really noticed....but I don't see a reason why that functionality should not be available.