topic Re: Apps and Threats Threshold time in General Topics

Apps and Threats Threshold time

RobertShawver — Wed, 22 Dec 2021 16:17:19 GMT

What Threshold times are you guys using, why and has the log4j caused anyone to decrease this time?

Stock photo for example.

Re: Apps and Threats Threshold time

OtakarKlier — Wed, 22 Dec 2021 16:49:22 GMT

Hello,

I follow the following articles recommendations. However with Log4J out, I'll update when they come out.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat-prevention/best-practices-for-content-and-threat-content-updates/best-practices-mission-critical.html#id184AH00L078

Here is the more aggressive settings recommendations.

https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/threat-prevention/best-practices-for-content-and-threat-content-updates/best-practices-security-first.html#id184AH00F06E

Regards,

Re: Apps and Threats Threshold time

RobertShawver — Wed, 22 Dec 2021 16:58:04 GMT

That's basically what I've been following. So are you doing ad-hoc immediately as new ones come out because of the log4j issue and if so, how long do you see yourself keeping that up?

Re: Apps and Threats Threshold time

OtakarKlier — Wed, 22 Dec 2021 19:07:24 GMT

Hello,

So I didnt change the timeframe or settings for my dynamic updates. What I have been doing is reviewing the updates that come out and see if there was a log4j update, if yes then I apply it, if no, I leave the system to follow its normal process.

Regards,

Re: Apps and Threats Threshold time

RobertShawver — Wed, 22 Dec 2021 19:10:52 GMT

Your time is greatly appreciated!