Nominated Discussion: Understanding Signature Versions

JayGolf — Tue, 17 Oct 2023 14:28:31 GMT

This Nominated Discussion Article is based on the post "What would this number be at the end of some signatures?" by @fdagan96 and answered by myself, JayGolf!

Guys, I saw that there is a different number sometimes in the same signature. What would that be? what is it for? Is there any documentation talking about it?
If I block the subscription with a number and another one appears with another number, do I have to do this blocking too or do these numbers not interfere with the subscription blocking and just put the name?

example:

1- DESCRIPTION AndroxGh0st Scanning Traffic Detection(86759)
2- DESCRIPTION AndroxGh0st Scanning Traffic Detection(86760)

If you can help me with these questions, please!

Thank you for your attention!

Accepted Solution:

Hi @fdagan96,

These numbers represent the version number of the signature. In this case, "DESCRIPTION AndroxGh0st Scanning Traffic Detection(86760)" is the later version of the signature. You don't need to manually block each version as the latest threat updates include the most recent signatures.

article Nominated Discussion: Understanding Signature Versions in General Articles

Nominated Discussion: Understanding Signature Versions