Enable or disable a rule - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM 3.x Documentation
Product
Cortex XSIAM
Creation date
2025-07-15
Last date published
2026-06-04
Category
Administrator Guide

If you would like to temporarily suspend a rule, you can disable it. To enable or disable a cloud security rule:

  1. Navigate to Posture Management → Rules & Policies → Rules → Cloud Security.

  2. From the Rules page, there are two ways to access the option:

    1. Right-click the entry and then select Enable or Disable.

    2. Click on the rule. Next, on the Details page, click the more options icon (⋮) and then select Enable or Disable.