topic Re: Threats alert in General Topics

Threats alert

tiwara — Tue, 22 Apr 2014 13:58:47 GMT

Hello Team,

I have configured the panorama threat alert for one of our firewall and its working fine. Alerts has been configured for High and Critical .

we are getting so many alert from one IP (10.32.100.238) , one of vulnerabilities management device . I want to create a rule so that we can exclude the alerts from the source IP 10.32.100.238 and add it to white-list .

Re: Threats alert

HULK — Tue, 22 Apr 2014 15:34:59 GMT

Hello Amber

Could you please let me know the “Threat ID” for all those messages. If the destination is one of your security device used for vulnerabilities management, you can make an exception into the “Vulnerability “ profile and set action to “ allow” ( default action would be alert).

Hope this helps.

Thanks

Re: Threats alert

tiwara — Thu, 24 Apr 2014 18:35:28 GMT

Hello ...

Thanks for your help .

I have created a new security profile rule with VPP and allow the traffic for the particular source IP. works fine.