Does Evident Monitoring evaluate policies to determine which signatures should run?

Does Evident Monitoring evaluate policies to determine which signatures should run?

0
Created On 09/26/18 13:45 PM - Last Modified 07/19/22 23:08 PM


Symptom


Does Evident Monitoring evaluate policies to determine which signatures should run?

Resolution


Yes, Evident Monitoring retrieves the list of allowed services from STS.  Each signature has a list of required services.  If the allowed services from STS is insufficient to run a signature, that signature will be skipped.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clo1CAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail