Nominated Discussion: Understanding Signature Versions

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Community Team Member
No ratings

This Nominated Discussion Article is based on the post "What would this number be at the end of some signatures?" by @filipe.r.oliveira and answered by myself, JayGolf!

 

Guys, I saw that there is a different number sometimes in the same signature. What would that be? what is it for? Is there any documentation talking about it?
If I block the subscription with a number and another one appears with another number, do I have to do this blocking too or do these numbers not interfere with the subscription blocking and just put the name?

example:

1- DESCRIPTION AndroxGh0st Scanning Traffic Detection(86759
2- DESCRIPTION AndroxGh0st Scanning Traffic Detection(86760)

If you can help me with these questions, please!


Thank you for your attention!

 

Accepted Solution:

 

 

Hi @filipe.r.oliveira,

 

These numbers represent the version number of the signature. In this case, "DESCRIPTION AndroxGh0st Scanning Traffic Detection(86760)" is the later version of the signature.  You don't need to manually block each version as the latest threat updates include the most recent signatures. 

 

Rate this article:
  • 1939 Views
  • 0 comments
  • 0 Likes
Register or Sign-in
Labels
Article Dashboard
Version history
Last Updated:
‎10-17-2023 07:28 AM
Updated by: