topic Re: Threat Logs in Advanced Threat Prevention Discussions

Threat Logs

mcragg — Thu, 29 Nov 2018 06:33:11 GMT

I believe I have everything configured correctly for threat prevention. Able to see traffic in every log type except for threat. Licensed and download/install is up to date. Been through some generic troubleshooting steps that haven't helped. Any ideas on where I need to go next?

Re: Threat Logs

OtakarKlier — Thu, 29 Nov 2018 20:29:39 GMT

Hello,

Just to verify, you do have the security polices set to use the threat signatures and are set to log at session end?

Please advise,

Re: Threat Logs

mcragg — Wed, 05 Dec 2018 15:35:22 GMT

All rules are configured to use the threat profiles. I've tried both the default and the custom I created. Logging is set to session end on all of the rules as well.

Re: Threat Logs

OtakarKlier — Thu, 06 Dec 2018 16:12:05 GMT

That is interesting. I also take if you dont have any filters set at the top?

If not, I would say call support as something doesnt seem right.