What is the Palo Alto recommended standard for Vulnerabilty Profiles, is it to block Critical and High Alerts? or to block medium alerts as well?

J.Yeleti — Fri, 16 Jan 2026 15:00:17 GMT

Re: What is the Palo Alto recommended standard for Vulnerabilty Profiles, is it to block Critical and High Alerts? or to block medium alerts as well?

TomYoung — Fri, 16 Jan 2026 15:59:34 GMT

Hi @J.Yeleti ,

However, if you run a Best Practice Assessment (BPA) from Strata Cloud Manager (SCM) (formerly AIOps) (There is a free version.) or if you download a Day 1 Configuration from the Customer Service Portal (CSP), then you will get more specific guidelines.

Below is a screenshot of my Vulnerability Profiles from the Day 1 Configuration fine-tuned with recommendations from the BPA. Medium vulnerabilities are blocked for inbound and outbound traffic, but alerted for internal traffic.

Thanks,

Tom

topic Re: What is the Palo Alto recommended standard for Vulnerabilty Profiles, is it to block Critical and High Alerts? or to block medium alerts as well? in Next-Generation Firewall Discussions

What is the Palo Alto recommended standard for Vulnerabilty Profiles, is it to block Critical and High Alerts? or to block medium alerts as well?

Re: What is the Palo Alto recommended standard for Vulnerabilty Profiles, is it to block Critical and High Alerts? or to block medium alerts as well?