I need to test my-profile I created with an exception for ID 36809 Sandworm to "block". How can I test this to be sure sandworm is blocked by the firewall ?

[mdonadio]

Under the vulnerability-protection -> my-profile I creaed an exception for ID 36809 Sandworm and set to "block". How can I test this to be sure  sandworm is blocked by the firewall ?

[mmmccorkle]

mdonadio,

I suppose the way to test this would be to get a sample of this vulnerability and run it through your firewall in a controller environment. Either with TCPReplay or a controlled VM environment.

Thanks!

Please do not forget to mark any 'helpful' or 'correct' answers'.