topic Profile Settings needed when action is set to drop? in General Topics

Profile Settings needed when action is set to drop?

DenisHierholzer — Wed, 08 Nov 2017 10:27:42 GMT

Hi,

When I configure a security rule and set the action to drop or deny, what sense does it make to configure Profile Settings?

From my point of view the traffic gets blocked before any Profile settings will be checked. Is this correct?

Best Regards,

Denis

Re: Profile Settings needed when action is set to drop?

Mick_Ball — Wed, 08 Nov 2017 10:47:46 GMT

you are correct,

Security profiles are not used in the match criteria of a traffic flow. The security profile is applied to scan traffic after the application or category is allowed by the security policy.