topic Default Profile Actions in General Topics

Default Profile Actions

jwolach — Wed, 27 Jan 2010 22:22:54 GMT

Is there a document that explains the default actions for the default profile for AV, AS & VP?

Re: Default Profile Actions

nrice — Thu, 28 Jan 2010 17:03:26 GMT

If you're running 3.0 or above, the default actions can be found in the GUI under Objects> Antivirus, Anti-spyware and Vulnerability Protection. To see the information for Antivirus and Anti-spyware, click on New. The default action for Vulnerability Protection can be found by selecting New then Custom from the drop down menu labeled Rule Type. This will bring up the CVE list which contains a column listing the default action.

Re: Default Profile Actions

jwolach — Thu, 28 Jan 2010 17:58:39 GMT

I've done that however, the Custom Vulnerability Protection list is extremely long to go through screen-by-screen. I wanted to see if maybe there was a list PAN compiled that lists the default actions.

Thanks very much.

Re: Default Profile Actions

fredallee — Thu, 28 Jan 2010 18:24:04 GMT

You can do a couple of things to assist in viewing the default actions of IPS signatures in the custom vulnerability protection profile screen. First, you can increase the number of signatures per page to 300. Second, you can filter the list by clicking on 'Show filter' which will allow you to filter down the group of signatures that you would like to look at, based on name, severity, affected host, CVE, etc.

Alfred