Security Policy Actions- Vulnerability

karthikeyanB — Thu, 24 Oct 2019 13:26:21 GMT

Dear All,

Kindly help me understand below query -

We would like to configure Security Policy Action "Block IP" for Critical, High and Medium level Vulnerability signatures for 3600 sec. As per understanding traffic from source-destination pair; Configurable for a 3600 seconds (period of time) will be blocked.

However request you to clarify whether traffic will be Allow or dropped on first attempt or detection of Vulnerability (Critical, High and medium) signature.

Please clarify.

Thanks in advance

Re: Security Policy Actions- Vulnerability

OtakarKlier — Thu, 24 Oct 2019 21:42:03 GMT

Hello,

Once it is discovered, it will be blocked going forward for 3600 seconds.

Hope that helps.

topic Security Policy Actions- Vulnerability in General Topics

Security Policy Actions- Vulnerability

Re: Security Policy Actions- Vulnerability