topic Custom Vulnerability Protection in General Topics

Custom Vulnerability Protection

s_quasar — Fri, 10 Mar 2017 16:31:00 GMT

Hi,

I've made a custum VP and included into my VP group. In security policy I have applied the standard one (NOT my personal VP) to a security policy but when I go in monitor threat I see that matched also the custom VP. Why??

Re: Custom Vulnerability Protection

santonic — Mon, 13 Mar 2017 07:38:35 GMT

I guess you've set flags for your custom VP in a way that some rule in general (default) protection profile matches them.

Re: Custom Vulnerability Protection

reaper — Mon, 13 Mar 2017 09:02:54 GMT

a custom vulnerability works pretty much the same way as a custom URL category: it automatically gets added to all Vulnerability profiles.

If you only want a specific profile to enforce upon it, you should set the default action of the custom vulnerability to alert (no action) or allow (no action + no logging) and then manually set an action (drop, reset ,..) in the profile you want to use for enforcement.