topic Re: Vulnerability Protection Threat level in General Topics

Vulnerability Protection Threat level

murphyj — Fri, 12 Jul 2013 18:18:47 GMT

I have been trying to figure out if there is away to adjust the Threat level of an event under the Vulnerability Protect.

For Example I have set certain vulnerabilities to drop packages but I want to change the threat of it so its no longer a high threat. Does anyone know a way to do this or is that field something you cant edit? Thanks for you time.

Re: Vulnerability Protection Threat level

craymond — Fri, 12 Jul 2013 18:55:05 GMT

I am not aware of a method of doing that since it is part of the vulnerability (threat) definition. Even if you found a way to modify it, the next time you downloaded the new threat sigs, it would be overwritten.

Re: Vulnerability Protection Threat level

mbutt — Fri, 12 Jul 2013 18:57:24 GMT

The severity of the threat can not be changed. However you can change the default behavior whether to drop or allow the traffic.

Below doc explains how to create exception on a threat.

https://live.paloaltonetworks.com/docs/DOC-3699

Thanks

Re: Vulnerability Protection Threat level

murphyj — Fri, 12 Jul 2013 19:03:45 GMT

Thanks for your time and information.