Combination Signatiure in Custome Vulnerablity Signature

[JeffJin]

Hi

when I create new combination Vulnerablity Signatures ( for examples create new threat ID 48888 inlcude threat ID 40000 or 40001 )

1) I am not sure if ID=40000 attack happend , if threat log both have two log are ID=48888 & ID=40000 log , or which one of them ?

2) if I put the ID=48888 in Vulnerablity Exception list , when ID=4000 attack happend , if threat log still have ID=4000 log or not ?

Thanks

Jeff 

[gswcowboy]

Sorry for the late reply. Let me run some tests in the lab and get back to you.

Regards,

Renato