ENS Firewall, how to delete adaptive rules from ePO?

[polezhaevdmi]

ENS Firewall under supervision of ePO 5.10 (codebase is actual).

The adaptive mode feature is described here (sorry, found no similar chapter in 10.7.x documentation).

Suppose, I created the rule set in adaptive mode, investigated them, and developed + tested my own rule set using ePO. Thus, the adaptive rules are unnecessary. Is it possible to delete them using ePO? In "Firewall Client Rules" tool I found no Action to delete the marked rules (screenshot).

Which tool and in which way should be used in such case?

The workaround I found is 'rude': delete the corresponding group in 'System Tree' (after moving all endpoints to fresh group with same policy set). Still, hope, the 'wise solution' is existing...

[cdinet · Accepted solution]

To remove adaptive rules, you need to disable adaptive mode, then disable this in the firewall options policy under advanced, tuning options.

Retain existing user-added rules and Adaptive mode rules when this policy is enforced

The rules will then be removed from the clients and effectively also epo database as clients apply the new policy and report in that they no longer have adaptive rules.