https://live.paloaltonetworks.com/t5/advanced-threat-prevention/setting-enhanced-security-for-spyware-ids-14978-and-14984/m-p/163662#M32 <P>Figured it out. The enabled check box was not checked for each ID.</P> Wed, 28 Jun 2017 17:39:32 GMT Bvance 2017-06-28T17:39:32Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/setting-enhanced-security-for-spyware-ids-14978-and-14984/m-p/163661#M31 <P>I am following the document at <A href="https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/content-inspection-features/enhanced-security-for-url-category-and-application-based-policy" target="_blank">https://www.paloaltonetworks.com/documentation/71/pan-os/newfeaturesguide/content-inspection-features/enhanced-security-for-url-category-and-application-based-policy</A>&nbsp;in order to change the default action for spyware IDs 14978 and 14984. This is on an anti-spyware profile I had already created and in use on an existing security rule. I am running version 7.1.4 and application and threat version 711-4104. When I change the action on the two mentioned IDs I get the red flag in the upper left corner of the action field and it will not save my changes, it always reverts back to default (allow). I haven't yet fond the reason why it rejects the change. Any ideas?</P><P>Thanks,</P> Wed, 28 Jun 2017 17:24:08 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/setting-enhanced-security-for-spyware-ids-14978-and-14984/m-p/163661#M31 Bvance 2017-06-28T17:24:08Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/setting-enhanced-security-for-spyware-ids-14978-and-14984/m-p/163662#M32 <P>Figured it out. The enabled check box was not checked for each ID.</P> Wed, 28 Jun 2017 17:39:32 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/setting-enhanced-security-for-spyware-ids-14978-and-14984/m-p/163662#M32 Bvance 2017-06-28T17:39:32Z