Vulnerability & Anti Spyware Profile Best Practice

[YazarArafath]

Dear Team,

I would appreciate if you could share the best practices for the following security profiles

1.Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic.

We are unable to enable this profile in some of the policies due to some dependencies. Please share scenarios in which we can skip this profile.

2.Ensure an anti-spyware profile is configured to block on all spyware severity levels, categories, and threats

Due to some low and informational dependencies, we are unable to enable this profile in some of the Access Policies. Can you please let me know in which scenario we can skip this profile.

Thanks.

[OtakarKlier]

Hello,

I have a few that I have had to bypass as well. What I typically do if find out what is getting blocked, create a Spyware policy that excludes that definition, and then apply that one to the policy.

Hope that helps.