No exempt profile in threat details

[mr.linus]

Dear,

We have some traffic that is getting blocked because of a strict vulnerability profile.

I want to exempt a certain IP from this profile.

But when I click on details in the threat logs, there is nothing filled in the "Exempt profiles"

Which is strange because it is blocking the traffic because of some profile, only it will not show me which one...

If I just add an Exempt IP here, click OK, and go look in the correct vulnerability profile no exemption is created, which I guess is logic since I did not specify in which profile it should at the exemption.

Is this a bug, or am I missing something?

[UhMayYeah]

Can you verify if you have followed all steps described in the following article :

[mr.linus]

There are not that many steps to follow... And I get stuck at step 3 since I do not get anything in the Exempt profiles list...

[UhMayYeah]

.You cannot add exemptions using default/strict security profile.

Clone the strict vulnerability profile and use it in the rule.

[mr.linus]

we are already using a custom profile

[UhMayYeah]

Can you check the log details clicking the "looking glass" icon alongside Threat log and check the security rule that is inspecting this traffic.

[mr.linus · Accepted solution]

Hmmmm....

I have just tried the exact same thing I was doing but with chrome instead of firefox, and now the exempt list was populated with my threat profiles.

I was thus able to select the correct one and add the IP exemption.

So it seems everything is working as expected, I guess it was just a browser issue (would not be the first time I have seen something like this happening)

Tanx for all the suggestions.

[mikand]

Did you notify the technical support of your finding?

[mr.linus]

yeah, I had opened a case for this as well.