Vulnerability Signature action is Alert but traffic is getting reset both due to threat

Reply
L4 Transporter

Vulnerability Signature action is Alert but traffic is getting reset both due to threat

In PA  traffic is blocked due to threat signature.

In threat  kogs it shows reset both.

 

When i check the signature it shows default action is alert only???

 

Why PA is resetting the connection when signature shows  action as  alert only???

Community Manager

Re: Vulnerability Signature action is Alert but traffic is getting reset both due to threat

Have you checked the security profile that is being hit? The default action for a specific signature may be alert, but the profile can be set to, for example, reset both on (all) high severity threats

Help the community: Like helpful comments and mark solutions
Reaper out
L4 Transporter

Re: Vulnerability Signature action is Alert but traffic is getting reset both due to threat

Yes check the security profile it shows if alert is high then action is reset.

Why is this behaviour?

Community Manager

Re: Vulnerability Signature action is Alert but traffic is getting reset both due to threat

This is how the administrator configured the profile

Help the community: Like helpful comments and mark solutions
Reaper out
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!