From f4fa51986ec3947ab06ee7dcfd2bb8093e7f4a6d Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Mon, 30 Jan 2023 18:42:38 +0100 Subject: [PATCH] doc: warn IPS users on new exception policy default --- doc/userguide/upgrade.rst | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst index 473c8cd488..aad149ae08 100644 --- a/doc/userguide/upgrade.rst +++ b/doc/userguide/upgrade.rst @@ -36,11 +36,9 @@ Upgrading 6.0 to 7.0 Major changes ~~~~~~~~~~~~~ - Upgrade of PCRE1 to PCRE2. See :ref:`pcre-update-v1-to-v2` for more details. -- Introducing the :ref:`Exception Policy's Master Switch `. This - allows to setup a single policy for all traffic exceptions. This is a breaking - change for the default behavior in the Exception Policies: in IPS mode, if an - exception policy is not set, it will fall back to the the master switch now, - instead of being ignored. Prevent this by disabling the master switch. +- IPS users: by default various new "exception policies" are set to DROP + traffic. Please see :ref:`Exception Policies ` for details + on the settings and their scope. Security changes ~~~~~~~~~~~~~~~~