doc: warn IPS users on new exception policy default

diff --git a/doc/userguide/upgrade.rst b/doc/userguide/upgrade.rst
index 473c8cd488aac89f0c203b473eb650995cd4f6f7..aad149ae08e6a4b3f63c41cc75807a00b342efb1 100644 (file)
--- a/doc/userguide/upgrade.rst
+++ b/doc/userguide/upgrade.rst
@@ -36,11 +36,9 @@ Upgrading 6.0 to 7.0
 Major changes
 ~~~~~~~~~~~~~
 - Upgrade of PCRE1 to PCRE2. See :ref:`pcre-update-v1-to-v2` for more details.
-- Introducing the :ref:`Exception Policy's Master Switch <master-switch>`. This
-  allows to setup a single policy for all traffic exceptions. This is a breaking
-  change for the default behavior in the Exception Policies: in IPS mode, if an
-  exception policy is not set, it will fall back to the the master switch now,
-  instead of being ignored. Prevent this by disabling the master switch.
+- IPS users: by default various new "exception policies" are set to DROP
+  traffic. Please see :ref:`Exception Policies <exception policies>` for details
+  on the settings and their scope.
 
 Security changes
 ~~~~~~~~~~~~~~~~