topic New Deployment - No Threat Data in General Topics

New Deployment - No Threat Data

jickfoo — Mon, 28 Feb 2011 12:57:43 GMT

I just put my new 4020 in-line yesterday. I see traffic. I see App Categories. I see nothing under threat monitor even though the feature is licensed and activated. I had a test box a few weeks back that was in span-mode (tap-mode) and Threat Data showed up immediately.

My current policy is very simple. I am allowing all out and allowing all in. I also have a test policy that blocks viruses and does URL filtering only from my machine.

I guess my question is, do I need to have virus scanning enabled in the policy to see threat data for the general population? I dont want to do any filtering just yet.

Thanks,

Justin

Re: New Deployment - No Threat Data

bpappas — Mon, 28 Feb 2011 14:10:19 GMT

You will need to enable a spyware, antivirus and/or vulnerability profile and set the action to "alert" if you wish to log the threat traffic and allow it to pass through your PAN device.

-Benjamin

Re: New Deployment - No Threat Data

jickfoo — Tue, 01 Mar 2011 13:27:05 GMT

Yep, that works.. Thanks a lot !