topic I need to test my-profile I created with an exception for ID 36809 Sandworm to "block". How can I test this to be sure sandworm is blocked by the firewall ? in Automation/API Discussions

I need to test my-profile I created with an exception for ID 36809 Sandworm to "block". How can I test this to be sure sandworm is blocked by the firewall ?

mdonadio — Thu, 15 Jan 2015 21:42:41 GMT

Under the vulnerability-protection -> my-profile I creaed an exception for ID 36809 Sandworm and set to "block". How can I test this to be sure sandworm is blocked by the firewall ?

Re: I need to test my-profile I created with an exception for ID 36809 Sandworm to "block". How can I test this to be sure sandworm is blocked by the firewall ?

mmmccorkle — Fri, 16 Jan 2015 00:22:00 GMT

mdonadio,

I suppose the way to test this would be to get a sample of this vulnerability and run it through your firewall in a controller environment. Either with TCPReplay or a controlled VM environment.

Thanks!

Please do not forget to mark any 'helpful' or 'correct' answers'.