How to Configure a Data Filtering Profile to Alert but Not Block

How to Configure a Data Filtering Profile to Alert but Not Block

22678
Created On 09/25/18 19:47 PM - Last Modified 06/09/23 07:39 AM


Resolution


Configure a Data Filtering Profile on the web UI at  Objects > Security Profiles > Data Filtering.

 

The Alert Threshold and Block Threshold fields specify how many instances of a data match, within a single session, that must be observed before the Palo Alto Networks device performs an alert or block action, respectively.

 

To configure a Data Filtering Profile that will alert and not block, set the value of the Alert Threshold to a non-zero value and set the Block Threshold to 0.

 

For example:

Screen Shot 2014-03-12 at 4.20.10 PM.png

 

owner: jjosephs
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CldCCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language