Q: How do I set up "per rule" alert emails?

A:

Per rule email alerts are configured in two places. Navigate to P&R > Intrusion Sensor > Email. Click on Per Rule alerting and select any rules for which you want an alert (sent to the general alerting email address). You'll get an email if this rule is triggered in any IDS policy. There's also a Per Rule alertting setup in each IDS policy config. I think if configured here (and not the above), you'll only get an alert when this rule triggers on this policy.