topic Re: Antivirus Security Profile Exception in General Topics https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1883#M1406 <HTML><HEAD></HEAD><BODY><P>Hello John,</P><P></P><P>As far as I know you can do an exception based on application and specify whatever action you want but not specific to an ID for antivirus profile.</P><P></P><P>Regards,</P><P>Hari Yadavalli</P></BODY></HTML> Fri, 13 Feb 2015 17:03:11 GMT hyadavalli 2015-02-13T17:03:11Z Antivirus Security Profile Exception https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1882#M1405 <HTML><HEAD></HEAD><BODY><P>I want to create an exception action for a specific antivirus ID (which happens to be outbound traffic). The default action is “alert” and I want this one ID to be “drop”. This is possible for the spyware and vulnerability profiles, but my problem is that it looks like the antivirus security profile exceptions are ONLY “allow”. How can I configure the PA to “drop” only one specific antivirus-ID? </P></BODY></HTML> Fri, 13 Feb 2015 16:37:48 GMT https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1882#M1405 JohnPa 2015-02-13T16:37:48Z Re: Antivirus Security Profile Exception https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1883#M1406 <HTML><HEAD></HEAD><BODY><P>Hello John,</P><P></P><P>As far as I know you can do an exception based on application and specify whatever action you want but not specific to an ID for antivirus profile.</P><P></P><P>Regards,</P><P>Hari Yadavalli</P></BODY></HTML> Fri, 13 Feb 2015 17:03:11 GMT https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1883#M1406 hyadavalli 2015-02-13T17:03:11Z Re: Antivirus Security Profile Exception https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1884#M1407 <HTML><HEAD></HEAD><BODY><P>Yes, I think I can specify an action for an entire "application" that registers any virus, but that is very broad and this would cover ALL virus-signatures for all SMTP traffic (In this case) and I don’t really want to do that. Is there any way to apply finer granularity to it? </P></BODY></HTML> Fri, 13 Feb 2015 17:08:58 GMT https://live.paloaltonetworks.com/t5/general-topics/antivirus-security-profile-exception/m-p/1884#M1407 JohnPa 2015-02-13T17:08:58Z