Combination Signatiure in Custome Vulnerablity Signature

JeffJin — Sat, 15 Oct 2011 02:26:15 GMT

when I create new combination Vulnerablity Signatures ( for examples create new threat ID 48888 inlcude threat ID 40000 or 40001 )

1) I am not sure if ID=40000 attack happend , if threat log both have two log are ID=48888 & ID=40000 log , or which one of them ?

2) if I put the ID=48888 in Vulnerablity Exception list , when ID=4000 attack happend , if threat log still have ID=4000 log or not ?

Thanks

Jeff

Re: Combination Signatiure in Custome Vulnerablity Signature

gswcowboy — Sun, 16 Oct 2011 23:44:46 GMT

Sorry for the late reply. Let me run some tests in the lab and get back to you.

Regards,

Renato